rule
Lock Down IP Addresses – SSH and Else
Jan 26th
If you know the IP addresses that will be connecting to your machine, lock them down. Use the hosts.allow file as follows.
sshd : localhost : allow
sshd : 192.168.3. : allow
sshd : 192.168.1. : allow
sshd : ALL : deny
Using sshd : ALL : deny and listing various allow rules blocks everything other than the allowed rules. Therefore using sshd : IP : allow you will be able to connect to the machine from that IP only and everything else will be rejected. This procedure will substantially increase the security of the server.
