{"id":1177,"date":"2024-07-05T06:38:08","date_gmt":"2024-07-05T06:38:08","guid":{"rendered":"https:\/\/zalvis.com\/docs\/?p=1177"},"modified":"2024-07-05T06:38:08","modified_gmt":"2024-07-05T06:38:08","slug":"can-i-limit-the-ips-that-sshd-listens-on","status":"publish","type":"post","link":"https:\/\/zalvis.com\/docs\/can-i-limit-the-ips-that-sshd-listens-on.html","title":{"rendered":"Can I Limit the IP(s) that sshd Listens On?"},"content":{"rendered":"

To limit the IP addresses which sshd listens on, you just need to modify its settings within the sshd_config<\/strong>file. Follow these 4 easy steps:<\/p>\n

    \n
  1. First, backup the sshd_config<\/strong> file, then edit it with your favorite editor.<\/li>\n
  2. Now, to limit the IPs sshd listens on, you need to change the ListenAddress<\/strong> configuration line:root@root [~]# cd \/etc\/ssh\/<\/em>
    \nroot@root [\/etc\/ssh]# cp sshd_config sshd_config.save<\/em>
    \nroot@root [\/etc\/ssh]# vi sshd_config<\/em>
    \nroot@root [\/etc\/ssh]# diff sshd_config sshd_config.save<\/em>
    \n15c15<\/em>
    \n< ListenAddress 10.0.0.1<\/em>
    \n\u2014<\/em>
    \n> #ListenAddress 0.0.0.0<\/em><\/li>\n
  3. Next, restart sshd and verify that it\u2019s listening on the specified address:root@root [\/etc\/ssh]# \/etc\/init.d\/sshd restart<\/em>
    \nStopping sshd: [ OK ]<\/em>
    \nStarting sshd: [ OK ]<\/em>
    \nroot@root [\/etc\/ssh]# netstat -anp | grep sshd<\/em>
    \ntcp 0 0 10.0.0.1:22 0.0.0.0:* LISTEN 1718\/sshd<\/em><\/li>\n
  4. If you want sshd to listen on more than one address, then add additional ListenAddress<\/em> lines to the configuration file:root@root [\/etc\/ssh]# diff sshd_config sshd_config.save<\/em>
    \n15,16c15<\/em>
    \n< ListenAddress 10.0.0.1<\/em>
    \n< ListenAddress 10.0.0.2<\/em>
    \n\u2014<\/em>
    \n> #ListenAddress 0.0.0.0<\/em><\/p>\n

    root@root [\/etc\/ssh]# \/etc\/init.d\/sshd restart<\/em>
    \nStopping sshd: [ OK ]<\/em>
    \nStarting sshd: [ OK ]<\/em>
    \nroot@root [\/etc\/ssh]# netstat -anp | grep sshd<\/em>
    \ntcp 0 0 10.0.0.1:22 0.0.0.0:* LISTEN 1884\/sshd<\/em>
    \ntcp 0 0 10.0.0.2:22 0.0.0.0:* LISTEN 1884\/sshd<\/em><\/li>\n<\/ol>\n

    And there you have it!<\/p>\n

    If you enjoyed this article, then you\u2019ll love Zalvis's Cloud Hosting platform. Turbocharge your website and get 24\/7 support from our veteran team. Our world-class hosting infrastructure focuses on auto-scaling, performance, and security. Let us show you the Zalvis difference! Check out our services.<\/a><\/div>