what do i have to enter in hosts.allow to allow ssh access only from a certain domain?
hosts.allow and hosts.deny (known as tcpwrappers) only affect programs run from xinetd usually. There are some other programs that are written to take advantage of tcpwrappers, but I do not know whether OpenSSH is one of them.
or is there another more secure way to restrict access to connect over ssh?
I would certainly suggest using your firewall to restrict access as long as you can give it static IP addresses. If you want every IP address that resolves to "mycompany.com" to have access, then that's more difficult.
-- Rodolfo J. Paiz rpaiz@xxxxxxxxxxxxxx