diff options
| author | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2010-11-16 15:40:20 -0800 |
|---|---|---|
| committer | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2010-11-16 15:40:20 -0800 |
| commit | 184cb6cb1431acfeec02caadf51fce246141e3cb (patch) | |
| tree | a663b93832a811ba77f65490a7db9c1baa25f10e | |
| parent | 8960375b2a9f11d413152b67f81ca765b157c711 (diff) | |
| download | vyatta-cfg-system-184cb6cb1431acfeec02caadf51fce246141e3cb.tar.gz vyatta-cfg-system-184cb6cb1431acfeec02caadf51fce246141e3cb.zip | |
Add ability to configure SSH listen address
Bug 2410
Add ability to add configure listen address in ssh_config.
set service ssh listen-address 1.2.4.40
Multiple values are allowed, and works for both IPv4 and IPv6
| -rwxr-xr-x | scripts/rl-system.init | 9 | ||||
| -rw-r--r-- | templates/service/ssh/listen-address/node.def | 10 |
2 files changed, 16 insertions, 3 deletions
diff --git a/scripts/rl-system.init b/scripts/rl-system.init index fc328b7b..b73befba 100755 --- a/scripts/rl-system.init +++ b/scripts/rl-system.init @@ -179,10 +179,13 @@ security_reset () { # Disable root login over telnet sed -i -e '/^# Pseudo-terminal (telnet)/,$d' /etc/securetty - # Disable root login with ssh - # Renable DNS validation + # Restore default sshd config + # Disable root login with ssh + # Renable DNS validation + # Remove Listen addresses sed -i -e '/^PermitRootLogin/s/yes/no/' \ - -e '/^UseDNS/s/no/yes/' /etc/ssh/sshd_config + -e '/^UseDNS/s/no/yes/' \ + -e '/^ListenAddress/d' /etc/ssh/sshd_config } start () { diff --git a/templates/service/ssh/listen-address/node.def b/templates/service/ssh/listen-address/node.def new file mode 100644 index 00000000..aeff03f2 --- /dev/null +++ b/templates/service/ssh/listen-address/node.def @@ -0,0 +1,10 @@ +multi: +type: ipv4,ipv6 +help: Local addresses SSH service should listen on +val_help: ipv4: IP address to listen for incoming connections +val_help: ipv6: IPv6 address to listen for incoming connections + +create: sudo sed -i -e '/^Port/a \ +ListenAddress $VAR(@)' /etc/ssh/sshd_config + +delete: sudo sed -i -e '/^ListenAddress $VAR(@)$/d' /etc/ssh/sshd_config |