[TriLUG] LAN/WAN interface question

[Jeremy Portzer]

On Mon, 16 Feb 2004, Mike M wrote:

> I need to open one server on my LAN to an outsider.  My Linksys
> router appliance (BEFSR11) doesn't seem to be up to the job.  I think
> it's time to upgrade to Linux.  
> 
> Reqs:
> 
> * Allow a certain static IP address to ssh to a single server. (THis is
> the requirement the appliance doesn't seem to support.)

Even though the appliance may not support this option, you can certainly
restrict which IP address can connect via ssh with iptables on the local
server, and/or with the sshd configuration file.  This single issue isn't
really a reason to ditch the appliance IMO, but certainly setting up a
Linux firewall/router would be a good exercise.

--Jeremy

-- 
/---------------------------------------------------------------------\
| Jeremy Portzer        jeremyp at pobox.com      trilug.org/~jeremy     |
| GPG Fingerprint: 712D 77C7 AB2D 2130 989F  E135 6F9F F7BC CC1A 7B92 |
\---------------------------------------------------------------------/