This is my /etc/sysconfig/iptables:It has two ports open 80 apache and 22 for ssh.# Firewall configuration written by system-config-firewall# Manual customization of this file is not recommended.*filter:INPUT ACCEPT [0:0]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [0:0]-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT-A INPUT -p icmp -j ACCEPT-A INPUT -i lo -j ACCEPT-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT-A INPUT -j REJECT --reject-with icmp-host-prohibited-A FORWARD -j REJECT --reject-with icmp-host-prohibitedCOMMITFor port 22 ( SSH ) I want to ensure no-one can connect to this port except for a specific ip address. example ip:1.2.3.4Please disregard any oversight/concerns regarding what if my ip changes and I can not SSH to my server any more.
How to ensure SSH port is only open to a specific IP address?
ssh;security;iptables