Answered by the Webhosting Experts
Tags +

Managed Services
at Hivelocity

Bare Metal Shouldn’t be a Grind
Let Hivelocity take the busy work out of your daily server maintenance with our Managed Services plans. Choose from 1 of 6 different managed service offerings. Standard and Premium plans available.

Questions about something specific? Chat now with one of our expert account managers and learn which plan is right for you and your customers!

With Managed Server Technicians on-site 24/7/365, your server is always in good hands.

Tags +
Tags
...
...

Can I limit the ip(s) that sshd listens on?

Yes, this can be set withing the sshd_config file.

Backup the sshd_config file,edit it with your favorite editor, and change the ListenAddress configuration line:
root@root [~]# cd /etc/ssh/
root@root [/etc/ssh]# cp sshd_config sshd_config.save
root@root [/etc/ssh]# vi sshd_config
root@root [/etc/ssh]# diff sshd_config sshd_config.save
15c15
< ListenAddress 10.0.0.1

> #ListenAddress 0.0.0.0
Restart sshd and verify that it is listening on the specified address:
root@root [/etc/ssh]# /etc/init.d/sshd restart
Stopping sshd:                                             [  OK  ]
Starting sshd:                                             [  OK  ]
root@root [/etc/ssh]# netstat -anp | grep sshd
tcp        0      0 10.0.0.1:22                 0.0.0.0:*                   LISTEN      1718/sshd
If you want sshd to listen on more than one address then add separate ListenAddress lines:
root@root [/etc/ssh]# diff sshd_config sshd_config.save
15,16c15
< ListenAddress 10.0.0.1
< ListenAddress 10.0.0.2

> #ListenAddress 0.0.0.0
root@root [/etc/ssh]# /etc/init.d/sshd restart
Stopping sshd:                                             [  OK  ]
Starting sshd:                                             [  OK  ]
root@root [/etc/ssh]# netstat -anp | grep sshd
tcp        0      0 10.0.0.1:22                 0.0.0.0:*                   LISTEN      1884/sshd
tcp        0      0 10.0.0.2:22                 0.0.0.0:*                   LISTEN      1884/sshd

Yes, this can be set withing the sshd_config file.

Backup the sshd_config file,edit it with your favorite editor, and change the ListenAddress configuration line:
root@root [~]# cd /etc/ssh/
root@root [/etc/ssh]# cp sshd_config sshd_config.save
root@root [/etc/ssh]# vi sshd_config
root@root [/etc/ssh]# diff sshd_config sshd_config.save
15c15
< ListenAddress 10.0.0.1

> #ListenAddress 0.0.0.0
Restart sshd and verify that it is listening on the specified address:
root@root [/etc/ssh]# /etc/init.d/sshd restart
Stopping sshd:                                             [  OK  ]
Starting sshd:                                             [  OK  ]
root@root [/etc/ssh]# netstat -anp | grep sshd
tcp        0      0 10.0.0.1:22                 0.0.0.0:*                   LISTEN      1718/sshd
If you want sshd to listen on more than one address then add separate ListenAddress lines:
root@root [/etc/ssh]# diff sshd_config sshd_config.save
15,16c15
< ListenAddress 10.0.0.1
< ListenAddress 10.0.0.2

> #ListenAddress 0.0.0.0
root@root [/etc/ssh]# /etc/init.d/sshd restart
Stopping sshd:                                             [  OK  ]
Starting sshd:                                             [  OK  ]
root@root [/etc/ssh]# netstat -anp | grep sshd
tcp        0      0 10.0.0.1:22                 0.0.0.0:*                   LISTEN      1884/sshd
tcp        0      0 10.0.0.2:22                 0.0.0.0:*                   LISTEN      1884/sshd

Share

Facebook
Twitter
LinkedIn
Email
WhatsApp

Need More Personalized Help?

If you have any further issues, questions, or would like some assistance checking on this or anything else, please reach out to us from your my.hivelocity.net account and provide your server credentials within the encrypted field for the best possible security and support.

If you are unable to reach your my.hivelocity.net account or if you are on the go, please reach out from your valid my.hivelocity.net account email to us here at: support@hivelocity.net. We are also available to you through our phone and live chat system 24/7/365.