Home / server / Questions / 62363
Accepted
agsamek
Asked: 2009-09-05 03:00:10 +0800 CST

restrict external SSH logins to specific users and allow intranet logins to all

  • 772

I would like to restrict external SSH logins to specific users and allow intranet logins (192.168.0.0/24) to all users. I would appreciate a complete example file for this scenario.

ssh intranet accounting server-settings

3 Answers

  1. Best Answer

    Although not tested, you should be able to use something akin to.

    Match Address *,!192.168.0.0/24
    DenyUsers *
    AllowUsers user1 user2 user3

    This would go into your sshd_config file.

    • 3

  2. Thank you for your answers. I have also found the following sshd_config syntax at http://ubuntuforums.org/showthread.php?t=523477 :

    AllowUsers john
AllowUsers *@192.168.0.*
    • 2

  3. Use host or public key authentication on the local LAN and then password authentication.

    Than configure known hosts or known_keys for every PC in you intranet

    • 0