SSH Security: Protecting Your Linux Servers

haydenjames.io

AllowUsers can match against user@ip/mask, and group support is a little more long winded with the Match scope. I would expect DNS names to be bad for a number of reasons.

Reply on news.ycombinator.com