Differences

This shows you the differences between two versions of the page.

--- linux_wiki:network_services_overview_ssh [2018/05/20 14:56]
billdozor [User Based]
+++ linux_wiki:network_services_overview_ssh [2019/05/25 23:50] (current)
@@ Line 123: / Line 123: @@
 ===== Host Based =====
-All are allowed by default.
+There are two methods to control access based on host:
+  * Firewall rich rule
+  * TCP Wrappers (hosts.allow, hosts.deny)
+\\
+==== Host Based: Firewall ====
+Create a rich rule<code bash>firewall-cmd --add-rich-rule='rule family="ipv4" service name="ssh" source address="192.168.1.152" log prefix="SSHD HOST DENIED: " reject'
+firewall-cmd --reload
+</code>
+  * Rejects ssh traffic from the source address 192.168.1.152 and logs the rejection.
+\\
+==== Host Based: TCP Wrappers ====
+The first match of the following actions is taken
+  * Matching entry in hosts.allow -> Host is allowed
+  * Matching entry in hosts.deny -> Host is denied
+  * No match of either -> Host is allowed
 \\
@@ Line 143: / Line 161: @@
 ===== User Based =====
-SSHD Main Config (**space separated**)
+SSHD Main Config (**space separated user list**)
 <code bash>
 vim /etc/ssh/sshd_config