paul.diprose@thecarfinancecompany.co.uk I need to restrict SSH access to only Admin users. Trying to work out if setting Access Control could help I have 2 networks 10.60.4.x and 10.60.8.x I just want my Admins to use ssh onto 10.60.8.x I only want my users to have access to 10.60.4.x (and not use SSH, but if a user wants to and downloads putty I don't want them to access 10.60.8.x as they may have credentials for these servers) So for my user group, if I set Access Control to yes and put in the box 10.60.4.0/24 Will this prevent my users from being able to ssh onto servers in the 10.60.8 range ? Thanks
maikcat you can always use the openssh server itself to restrict access to user via: tcp wrappers Deny_users directive Michael.
paul.diprose@thecarfinancecompany.co.uk Thanks Michael, I will do this anyway, but I was hoping OpenVPN would also have a solution. The issue is most people who use the company Laptops and need to use openvpn do not even know how to putty onto a server in the 10.60.8 range and only have access to their shared drives via the 10.60.4.x range. However some may have credentials to logonto 10.60.8 range servers, and I was hoping openvpn could stop this access. Currently It allows access to servers in the 10.60.4.x range which we want, and also 10.60.8 range which we don't want :-) I have tried Access control and specifying 10.60.4.0/24 , but I can still use putty to ssh onto 10.60.8 range . Any openvpn solution to prevent this? Thanks
maikcat Any openvpn solution to prevent this? openvpn does not provides any filtering function, the best thing you can do with openvpn is push selected routes to clients, everything the openvpn can do is only at the routing level not above.. Michael.
