Home / server / Questions / 614449
Accepted
Hannes
Asked: 2014-07-23 02:31:00 +0800 CST

how to enable scp only on public interface and ssh only in internal interface

  • 772

Server A has a public ip and a private ip, each on another vlan and thus on another virtual interface.

How can I enable scp only on the public ip and ssh only on the private IP, for all users.

Kind regards

Hannes De Bondt

linux

2 Answers

  1. Best Answer

    SCP is ssh. There is no "server" as in ftp, that listens, aside from the sshd daemon. If you enable ssh connection, you also enable scp (which is not a distinct protocl) and vice versa..

    • 0

  2. Actually scp transfers files over SSH protocol, so you need SSH access to the machine to be able to use scp.

    If you are concerned about security a firewall is what you need - blocking access from unwanted visitors on the public interface.

    Alternatively you can configure sshd to listen on the private IP only and setup an OpenVPN server to gain access to the server from a remote location.

    • 0