hosts.allow和hosts.deny只允许指定的ip通过ssh连接

hosts.allow设置

cat /etc/hosts.allow

#
# hosts.allow	This file contains access rules which are used to
#		allow or deny connections to network services that
#		either use the tcp_wrappers library or that have been
#		started through a tcp_wrappers-enabled xinetd.
#
#		See 'man 5 hosts_options' and 'man 5 hosts_access'
#		for information on rule syntax.
#		See 'man tcpd' for information on tcp_wrappers
#
sshd:10.0.0.61   #允许10.0.0.61这个ip ssh连接
sshd:172.16.1.   #允许172.16.1.这个网段 ssh连接

hosts.deny设置

cat /etc/hosts.deny

#
# hosts.deny	This file contains access rules which are used to
#		deny connections to network services that either use
#		the tcp_wrappers library or that have been
#		started through a tcp_wrappers-enabled xinetd.
#
#		The rules in this file can also be set up in
#		/etc/hosts.allow with a 'deny' option instead.
#
#		See 'man 5 hosts_options' and 'man 5 hosts_access'
#		for information on rule syntax.
#		See 'man tcpd' for information on tcp_wrappers
#
sshd:ALL  #拒绝所有ssh连接

重启sshd

systemctl restart sshd