Sylvain Ferriol <sferriol@imag.fr> writes:

>hello

>i want to config a ssh gateway between internet and my intranet:
>the specifications are:
>- a user from internet can not login the ssh_gateway
>- some users (admins) from intranet can login the ssh_gateway

>how can i do that ?
>can i allow sshd to accept login only from an ip address range ?

Use hosts.allow and only allow from the specific address range. ssh uses
tcpwrapper.


>is it more secure to only accept port forwarding on ssh_gateway ?

>thanks

>sylvain