Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 03 Dec 2003 22:13:47 -0500
From:      Steve Bertrand <iaccounts@northnetworks.ca>
To:        Chris <racerx@makeworld.com>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: ipfw and ssh example
Message-ID:  <1070507627.416.90.camel@ptp.northnetworks.ca>
In-Reply-To: <200312032055.58158.racerx@makeworld.com>
References:  <200312032055.58158.racerx@makeworld.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 2003-12-03 at 21:55, Chris wrote:
> Hiya folks.
> 
> 	Please show me an example that I might use if I want to allow only one IP 
> address into a box via ssh, yet deny all others.

The following will allow ssh from 192.168.1.3 to your box in through the
'rl0' interface, and deny all other ssh traffic to the box.

# ipfw add 10 allow tcp from 192.168.1.3 to me 22 in via rl0 keep-state
# ipfw add 11 deny tcp from any to me 22

Hope this helps.

Steve

-- 

Steve Bertrand
President/CTO,
Northumberland Network Services

t: 905.352.2688
w: www.northnetworks.ca



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1070507627.416.90.camel>