[ILUG] Mass updates with yum

paul at clubi.ie paul at clubi.ie
Thu Jul 26 14:27:28 IST 2007


On Thu, 26 Jul 2007, Kenn Humborg wrote:

> Not quite what I want, since I want to be able to SSH in from
> both the Internet and the LAN.  However, I don't want to allow
> root password guessing from the Internet.

Oh, bah.. my previous email missed that point ;).

You want per-key ACLs, which openssh supports. See the 
'AUTHORIZED_KEYS FILE FORMAT' of the sshd man page, see the 'from=' 
ACL. I think that's what you want.

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org	Key ID: 64A2FF6A
Fortune:
Flat tire on station wagon with tapes.  ("Never underestimate the bandwidth of a station wagon full of tapes hurling down the highway" Andrew S. Tanenbaum)



More information about the ILUG mailing list