On Wednesday 2011-10-05 14:08, James Lay wrote: >Why not just have sshd only listen to the interface you want? From >sshd_config: > >#Use these options to restrict which interfaces/protocols sshd will bind to >ListenAddress :: >ListenAddress 0.0.0.0 For the nitpick, as you can see, one never listens on interfaces, but addresses. That is a significant difference, considering the case when an address is assigned to multiple interfaces. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html