11-14-2021, 06:20 PM
IMHO, the essential part is refuse password authentication and enforcing ssh key.
You can directly restrict source IP in your user authorized keys. I'm using this as prefix
from="192.168.*,10.*"
= only local network ssh will be accepted
You can directly restrict source IP in your user authorized keys. I'm using this as prefix
from="192.168.*,10.*"
= only local network ssh will be accepted