From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Wed 24 Aug 2005 - 14:35:02 BST
On Wed, Aug 24, 2005 at 03:31:02PM +0200, metaworx lists wrote:
> > From: On Behalf Of DukeGangsta
> > Sent: Mittwoch, 24. August 2005 12:56
>
> > you should do a little change in your /etc/ssh/sshd_config of the
> > host-machine:
> > -----------------
> > ListenAddress <ip_of_host>
> > -----------------
>
> as an alternative you can also use the chbind tool to limit ssh to the
> "host-ip's".
>
> we do it that way:
>
> /usr/local/sbin/chbind --ip lo --ip publichost --ip privatehost --ip
> dummyhost /usr/sbin/sshd
>
> 'lo', 'publichost' and 'privatehost' are entries in the hosts-file and could
> be replaced with native ip addresses.
>
> the advantage is, that any program you run from within ssh is also limited
> to theese addresses unless you make a
> chbind --ip 0.0.0.0
> or
> chbind --ip <specific-ip>
>
> (which is done if you start a vserver :-)
I'd be careful about that ... it is current behaviour,
but it isn't guaranteed to work like this ...
(so better don't do that :)
best,
Herbert
> martin.
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver