SSH restriction and public keys.

Nondegenerate · n00b Joined: 19 Jan 2004 Posts: 7

I'd like to configure SSH on my gateway box such that if an incoming SSH connection originates from a specific "blessed" IP address or range of IP addresses that authentication may take place with a user/pass and for all other incoming connections they must use key authentication. Is this possible and how can I set this up?

humbletech99 · Veteran Joined: 26 May 2005 Posts: 1229 Location: London

setup two ssh daemons with different configs listening to different ports and then use iptables to grant the desired ip/range access to the port with user/pass and the other only allowed to the port only allowing key auth.

tuxmin · l33t Joined: 24 Apr 2004 Posts: 838 Location: Heidelberg

Read the section AUTHORIZED_KEYS FILE FORMAT in "man sshd". Maybe you can use the from="pattern-list" to achieve your goal.

Alex!!!
_________________
ALT-F4

Jrauch · n00b Joined: 19 Dec 2005 Posts: 20

Also, the allowusers and DenyUsers directives may be useful.
I think you are going to need a seperate instance of the server though.