Re: How to block ssh on specific ethernet interface

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wednesday 2011-10-05 14:08, James Lay wrote:

>Why not just have sshd only listen to the interface you want?  From
>sshd_config:
>
>#Use these options to restrict which interfaces/protocols sshd will bind to
>ListenAddress ::
>ListenAddress 0.0.0.0

For the nitpick, as you can see, one never listens on interfaces, but 
addresses. That is a significant difference, considering the case when 
an address is assigned to multiple interfaces.

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux