Re: SSH/SSHD local LAN only

["Mumia W.." <paduille.4061.mumia.w+nospam@earthlink.net>]

On 09/19/2008 12:32 PM, Lubos Vrbka wrote:
> well, if i understood the question correctly, this should do.
>
> put to file /etc/hosts.allow:
> ALL:ALL
>
> put to file /etc/hosts.deny:
> sshd: .your.domain.com allowed_ip_addresses allowed_networks 
> allowed_hostnames
>
> you can put more or less anything on the line and control who's allowed 
> to connect (man hosts.deny). i'd say it is straightforward and works 
> immediatelly without a need to (re)configure a firewall.
>
> best,

Those look backward to me:

file: /etc/hosts.allow:
ALL: LOCAL 127.0.0.0/8
sshd: 192.168.0.0/24

file: /etc/hosts.deny:
ALL:ALL