rapidhost
asked on
Linux security: limiting FTP users from logging in with telnet/ssh
Hi there,
I have a linux 6.2 box, for web hosting, and I am using proFTP for users to access their account. Each account is listed as a system user.
I am not wanting to provide shell access via telnet or SSH to any client, but have SSH available for my own login.
I am wondering if there is a location within SSH where I can allow only one login name (I have already disabled root login in SSH) to be able to access the system.
Any tips on this?
Thanks!
I have a linux 6.2 box, for web hosting, and I am using proFTP for users to access their account. Each account is listed as a system user.
I am not wanting to provide shell access via telnet or SSH to any client, but have SSH available for my own login.
I am wondering if there is a location within SSH where I can allow only one login name (I have already disabled root login in SSH) to be able to access the system.
Any tips on this?
Thanks!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
an added protection is to use tcpwrappers, put SSH into inetd.conf and this will allow IP based authentication in addition to username authentication. :)
ASKER
Thanks to both of you for your suggestions!