[TriLUG] Questions on SSH

[Scott Stancil]

> I have a security question. I have a linux box that I only want certain
> folks to get to. Yes, ssh is installed.  My question is on the
> hosts.allow, hosts.deny files.
>
> I've been trying to figure out the setup. What I want to do is set
> ALL:ALL in hosts.deny and only allow certain machines to connect with
> the ability to do "all".
>
> Here's what I have in hosts.allow so far:
>
> ALL: machine1.domain.org, machine2.domain.org
>
> Do I need the full resolved name?  Is this the best way of setting this
> up?


ALL: .domain.org EXCEPT machine42.domain.org

or

ALL: 192.168.1.0/255.255.255.0

I think either of these examples should work for what you are trying to
do...depends on how you can group them.


-- 
Scott Stancil
sstancil at geekrooms.com