iptables question

[kaancho12]

hi,
can anyone give me an example of howto "allow ssh access from trusted hosts". i modified my "PermitRootLogin no" in sshd_config file but cannot get the ssh access to work.
i am testing this on RedHat box but i need to transfer it to Fedora Core 3 box.
thanks
ko12

 

[JorGeVaL]

Hola
1. Enable the ssh server, i mean verify that the port is listening
SSH_PORTS="1024:65535 " # RSA Authentication

iptables -A INPUT -i "External interface" -p tcp --sport $SSH_PORTS -d "client IP " --dport 22 -j ACCEPT

Also maybe this link can help

http://www.yo-linux.com/TUTORIALS/LinuxTutorialIptablesNetworkGateway.html

 

[rliebsch]

you can also use hosts.deny and hosts.allow for this


Robert Liebsch
Stone Yamashita Partners

http://www.stoneyamashita.com/

 

[kaancho12]

thanks for the replies. When i used the hosts.deny and hosts.allow ---it worked fine except that the mailserver got screwed up.
i had lines "ALL:ALL" in hosts.deny and "ALL:ipaddress" and "ALL:localhost" in hosts.allow. But the sendmail was not able to send emails. when i removed the lines sendmail worked perfectly.
any idea how to enble sendmail in this situation.
thanks
ko12
PS: i will try to include some of the log file lines from the /var/log/maillog when i get a chance.