Ashley M. Kirchner wrote:
I have SSH locked down (through hosts.deny/.allow) to only allow known IPs to connect. This was done to curb the rash of script kiddies banging on it with dictionary attacks. However, one of my users is on DHCP which means every so often I need to change his entry in my hosts.allow file. Bit of a pain when I'm not in town or near a machine to check e-mail. So the question is: is there some way to solve this problem?
Would you find it acceptable to modify your hosts.allow to permit connections coming from a particular network, or a range of IP addresses formed by a IP/netmask pair?
