Advertisement

11.20.2008 at 08:44AM PST, ID: 23922068 | Points: 500
[x]
Attachment Details

SSH Access Limiting By IP Address During Certain Times

Asked by riverrunsupport in Linux, Linux Networking, Linux Administration

Tags: , ,

Please forgive my ignorance on certain topics including IPTABLES and such....

I have a client who runs a Red Hat server which runs their billing application. Once a day a user (accountant) needs to perform maintenance on this software by connecting to the box via SSH.

The other users around the company also use SSH to connect to this box. I want to

1. Allow the user to connect via SSH
2. Allow the user to kill SSH connections to the other IP addresses - this user will be connecting internally from either 192.168.0.61 or 192.168.0.109 so I want to retain these IP's so he doesn't cut himself off
3. Allow the user to perform the maintenance on the billing application
4. Allow the user to open the connections back up when finished so the clients can connect

Note: This user isn't the most savy user out there, but can trigger bash scripts if needed.

Any ideas on this scenario would be completely appreciated. Please reply to the thread if you have any questions.

I have heard that this can be accomplished via IP tables but I run into issue as the user would have to perform these actions. I am also not the best with IPTABLES but can learn quickly.

Thanks.Start Free Trial
[+][-]11.20.2008 at 09:08AM PST, ID: 23005565

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]11.20.2008 at 09:29AM PST, ID: 23005879

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]11.20.2008 at 10:35AM PST, ID: 23006650

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]11.20.2008 at 11:50AM PST, ID: 23007381

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 - Hierarchy / EE_QW_2_20070628