About this list Date view Thread view Subject view Author view Attachment view

From: metaworx lists (lists_at_metaworx.ch)
Date: Wed 24 Aug 2005 - 14:31:02 BST


> From: On Behalf Of DukeGangsta
> Sent: Mittwoch, 24. August 2005 12:56

> you should do a little change in your /etc/ssh/sshd_config of the
> host-machine:
> -----------------
> ListenAddress <ip_of_host>
> -----------------

as an alternative you can also use the chbind tool to limit ssh to the
"host-ip's".

we do it that way:

/usr/local/sbin/chbind --ip lo --ip publichost --ip privatehost --ip
dummyhost /usr/sbin/sshd

'lo', 'publichost' and 'privatehost' are entries in the hosts-file and could
be replaced with native ip addresses.

the advantage is, that any program you run from within ssh is also limited
to theese addresses unless you make a
chbind --ip 0.0.0.0
 or
chbind --ip <specific-ip>

(which is done if you start a vserver :-)

martin.

___________________________________________________________________

Martin Rueegg Owner and IT staff member
                                                 http://metaworx.ch
metaworx rueegg mailto:support_at_metaworx.ch

Site Office Germany Head Office Switzerland
Birkentalstrasse 4 Brandgrubenstrasse 23
DE-97209 Veitshoechheim CH-8610 Uster

tel: +49 (931) 970 90 30 tel: +41 (44) 99 44 044
fax: +49 (931) 970 90 88 fax: +41 (44) 99 44 043
                                            
gsm: +49 (1520) 8 563 549 gsm: +41 (79) 312 50 15
mailto:mrueegg_at_metaworx.ch skype: martin.rueegg
___________________________________________________________________
 

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 24 Aug 2005 - 14:31:30 BST by hypermail 2.1.3