Thursday, June 22, 2006

Linux: Accept Local SSH only

Linux Firewall must be running.

In /etc/sysconfig/iptables

find the following line

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT

and change to

-A RH-Firewall-1-INPUT -s xxx.xxx.xxx.0/24 -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT

replace xxx.xxx.xxx.0 with local IP range.

restart firewall

[root@localhost ~]# service iptables restart

(Thanks to Sasi)

No comments: