title: sshd_config AllowUsers
body: <p>I'm trying a very specific configuration for the AllowUsers directive that follows the logic below:</p>
  
  <ul>
  <li>Allow user1 to ssh from host1 </li>
  <li>Deny user1 to ssh from any other host</li>
  <li>Allow all other users from any host</li>
  </ul>
  
  <p>I've tried the following:</p>
  
  <pre><code>AllowUsers user1@host1 user1@!* *@*
  </code></pre>
  
  <p>Unfortunately, when ever the <em>@</em> is present, it negates the previous parameters and no matter what the order is.</p>
  
  <p>I have two questions; is there an order to which the parameters within the AllowUsers directive are executed and is the logic above even possible?</p>