How to allow only specific hosts to log on via SSH

[Compunuts]

I've set up a SSH server. I know two hosts' IP address that I wanted to allow and only from those two hosts for SSHD. The server is web server so I will need to have anonymous access for Apache to serve.

How do I limit to only those two hosts? Via /etc/hosts.allow? If so, how to configure? ALL: or portmap?

Thanks.

[demian]

You can use the hosts.allow thing if you're running sshd from inetd, I think. But I always use sshd as stand-alone server, so don't quote me on that.

What does work is the AllowUsers option in the sshd_config file cause that takes USER@HOST arguments, too, and it accepts wildcards. So

AllowUsers *@192.168.1.10 *@192.168.1.23 demian@*

should work.

[Compunuts]

Yeah, SSHD is standalone only and I don't have (x)inetd running.

Thanks. I will give it a shot.

[Schotty]

Any modern distro's actually ship sshd configured for (x)inetd ?

[Compunuts]

I'm not sure.

Mine is LFS so it is not even running indetd and I installed SSHD myself as standalone.