I've seen several threads about exactly this, such as this one, and I studied the manpage. What I think I should do, is tell SSH to deny this user if he's not coming from either of these 2 addresses.
These are the last lines in my sshd_config:
Code: Select all
Match Address !12.23.45.78
DenyUsers nagios
Match Address !11:22:44:55::1
DenyUsers nagios
Or it could even be simpler, without any Match element:
Code: Select all
DenyUsers nagios@!12.23.45.78 nagios@!11:22:44:55::1
Code: Select all
DenyUsers nagios
Match Address 12.23.45.78
AllowUsers nagios
Match Address 11:22:44:55::1
AllowUsers nagios
I'm sure it's something small, but I can't figure out how to make this work.
Anyone?