sshd - omezeni logovani uzivatelu v zavislosti na IP

[Ruza]

Radek Svoboda wrote:
> 
> Ne, tohle se mi nehodi. Potrebuju omezovat moznost prihlasit se, ne
> spojit se. Tj. rozhodovat podle username, ne IP (IP "vyvolenych" se
> muze menit).

Me pripada nejjednodussi pouzit v sshd.conf direktivu AllowUsers

     AllowUsers
              This keyword can be followed by a list of user name 
patterns, separated by spaces.  If specified,login is allowed only for 
user names that match one of the patterns. `*' and `?' can be used as 
wildcards in the patterns.  Only user names are valid; a numerical user 
ID is not recognized. By default, login is allowed for all users.  If 
the pattern takes the form USER na HOST then USER and HOST are separately 
checked, restricting logins to particular users from particular hosts.

Ruza