SSH whitelist 2 addresses

Question

We want to block all access to SSH, except for two IP addresses. One address is dynamic, it starts with 124.567.890.xxx where xxx is changing all the time. I read that you can do this by changing /etc/hosts.allow? How can we do this?

Solution

This should be as trivial as

sshd : 124.567.890. : allow

Comments

[Kevin]

Thanks, and multiple addresses?

[Kevin]

Nvm, found it: sshd: 83.83.83.83 127.0.0.1 83.83.83.84 192.168.1.1

[cjc]

In /etc/hosts.deny, you'll need to put in "sshd: ALL", so your combined rule will be deny all, allow X.

[Kevin]

Thanks, and how can I test the security? We only have one IP address right here.

[Sergei]

Is this relevant to your question? serverfault.com/questions/185153/…