Re: SSH/SSHD local LAN only

["S.D.Allen" <SDA@Deer-in-the-headlights.ca.invalid>]

On 2008-09-19, Mumia W.. <paduille.4061.mumia.w+nospam@earthlink.net> wrote:
> On 09/19/2008 12:32 PM, Lubos Vrbka wrote:
>> well, if i understood the question correctly, this should do.
>> 
>> put to file /etc/hosts.allow:
>> ALL:ALL
>> 
>> put to file /etc/hosts.deny:
>> sshd: .your.domain.com allowed_ip_addresses allowed_networks 
>> allowed_hostnames
>> 
>> you can put more or less anything on the line and control who's allowed 
>> to connect (man hosts.deny). i'd say it is straightforward and works 
>> immediatelly without a need to (re)configure a firewall.
>> 
>> best,
>> 
>
> Those look backward to me:
>
> file: /etc/hosts.allow:
> ALL: LOCAL 127.0.0.0/8
> sshd: 192.168.0.0/24
>
> file: /etc/hosts.deny:
> ALL:ALL

Thanks everyone. I didn't think of using the hosts file; And agree
with at least one poster, that this can be done in both sshd and hosts.
Can never be too secure eh ?

Cheers,

Steve