Make rules sshd to accept ssh from specified IP

• Tweet

• Tweet

Question :

How to create an IP TABLES rule which will accept ssh connections only from specified IP`s   ?

Answer :

1- via  Iptables

# Allow incoming ssh only from IP 10.10.1.1
iptables -A INPUT -p tcp -s 10.10.1.1 -d $SERVER_IP --sport 513:65535 --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp -s $SERVER_IP -d 10.10.1.1--sport 22 --dport 513:65535 -m state --state ESTABLISHED -j ACCEPT

2-Via  /etc/hosts.allow and  hosts.deby

To make this work in hosts.allow|deny…

In /etc/hosts.allow:

Code:

sshd: 127.0.0.1 10.10.1.1

In /etc/hosts.deny:

Code:

sshd: ALL

3- Via  sshd_config

edit  /etc/ssh/sshd_config

Code:

AllowUsers user1@10.10.1.1 user2@ip-address user3......

also you can use

Code:

DenyUsers user@ip-address

For  any  question plese  post it  in The  forum . Thnx

Related posts:

1. Make NFS in RHEL/Centos and Fedora
2. Twitter alters follow rules; stuns developers