Re: [CentOS] ssh attack

John Merritt wrote:

I tried to secure ssh better by putting in an AllowUsers line in sshd_config. Then I thought tcp wrappers and just putting in my own addresses in /etc/hosts.allow would be even better, until I found out that all mail to my email server would be rejected.

There should be no problem here. Just disallow everything in /etc/hosts.deny and then enable particular ip addresses for sshd. And also enable the appropriate addresses for other services that you want to be available to various IP addresses. You can use the word ALL to indicate no restriction. e.g.:

sendmail:ALL

man hosts.allow should get you the information that you need.

But if you are remote to the machine, be careful you don't lock yourself out!

-Steve