[SGVLUG] Want to limit external access to server

[DYN: Jim Workman]

Hi All,

My RHEL server has both internal and external Ethernet connections.   We are trying to limit outside SSH access to specific users.


So, in access.conf, can I add:



+ : johndoe boba sams : ALL         # To allow specific users from any IP

+ : ALL : 10.0.0.0/255.255.255.0    # To allow all users from local network

- : ALL : ALL except LOCAL          # Deny everyone else except (on the console?)



If I try this, is there a chance that I won't even be able to login as root on the console?



Should it accomplish my goal?



Would it affect other areas such as email, cron-tasks, etc?



Jim





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sgvlug.net/pipermail/sgvlug/attachments/20141113/46483a41/attachment.html>