Mailing List Archive

https://bugzilla.mindrot.org/show_bug.cgi?id=3193

--- Comment #1 from Stephen Satchell <spamfilter@satchell.net> ---
I've added a bit to my new server using Open SSH. This
is specific to a server, not a general access system
To summarize:

# Boilerplate
PermitRootLogin no
PermitEmptyPasswords no
IgnoreRhosts yes
DenyUsers root
# Add DenyUsers for all "role" accounts
DenyUsers nobody
# Set up mostly-closed security model
DenyUsers @*
# Allow specific user from internal network
AllowUsers user@10.1.1.*
# Allow specific user from outside IP address
AllowUsers user@1.2.3.4
AllowUsers user@5.6.7.8
AllowUsers user@9.10.11.12

Again, permission to use is given to anyone.

--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs