Re: no ssh on eth0

[Pascal Hambourg <pascal.mail@xxxxxxxxxxxxxxx>]

Hello,

Jan Engelhardt a écrit :
> > > I want to prevent ssh on eth0.
> > >
> > > Howto do it ?
> >
> > iptables -I INPUT -i eth0 -p tcp --dport 22 -j DROP

If the goal is to prevent *incoming* SSH connections on eth0.

> If
> 	eth0 10.0.0.1
> 	eth1 192.168.222.3
> then
> /etc/ssh/sshd_config:
>
> 	ListenAddress 192.168.222.3

This alone is not enough to prevent connections on eth0. You can connect 
to any host address on any interface. E.g. connect to eth1 address on 
eth0 interface and vice versa.