SSH access for specific IPs on Ubuntu Server

 Step 1: Blocking access from all IPs


Add the following line to the /etc/hosts.deny file:
sshd: ALL


Step 2: Allowing access from specific IP


Add the following line to the /etc/hosts.allow file:

  • For specific IP:
sshd : 99.151.250.7

  • List of IPs:
sshd: 172.168.0.21, 10.83.33.77, 10.63.152.9, 10.12.100.11, 10.82.192.2

  • Specific subnet:
sshd: 172.168.0.



It’s real test case on Ubuntu Server 20.04.4 LTS.

Popular posts

Basic AKHQ running with docker (HTTP)

Introduction This article describes basic case of running AKHQ with docker. All the code is available on my GitHub . Specification: - Protocol: HTTP - AKHQ authorization: NO Requirements: - internet access - to download AKHQ docker image, - installed docker - to run downloaded image, - running kafka - visible within any connected network interface. Configuration First of all we have to create YAML file - to tell AKHQ where is our kafka running. akhq: ui-options: topic-data: sort: Newest connections: local: properties: bootstrap.servers: "localhost:9092" Then just run AKHQ docker image (on port 1790) with previously created YAML config: docker run -it -p 1790:8080 --name akhq_basic_container -v application-basic.yml:/app/application.yml tchiotludo/akhq Once container is created you can start simple by: docker container start akhq_basic_container ...
Read more »

Running keycloak in 4 minutes for development on Windows

Image
Commands: Starting keycloak in development mode: kc.bat start-dev Obtaining token by curl: curl -X POST http://localhost:8080/realms/custom-realm/protocol/openid-connect/token -H 'Content-Type:application/x-www-form-urlencoded' --data "client_id=custom-client&username=user&password=user&grant_type=password" Helpful links: JSON beautifier: https://jsonformatter.org/ Tool for token debugging: https://jwt.io/
Read more »

AKHQ login with Keycloak

Introduction This article describes case of running AKHQ with docker and enabling login with Keycloak requirement to browse data on AKHQ UI. All the code is available on my GitHub . Specification: - Protocol: HTTP - AKHQ authorization: YES, with keycloak Requirements: - internet access - to download AKHQ docker image, - installed docker - to run downloaded image, - running kafka - visible within any connected network interface, - running keycloak - with created realm and configured client (confidential access, service account enabled, redirect URL), also reachable via any connected network. Configuration First of all we have to create YAML file - to tell AKHQ where is our kafka running and how to authorize users via Keycloak. At this moment we are not using any role-based privileges and default logged user group is "reader". If you need to execute any write operation, you have to change default grou...
Read more »