Matthew Dillon wrote: One thing I'd like to do with sshd is restrict connections to the local network by default One possibility is with tcpd, or tcpwrappers, it's possible to use /etc/hosts.allow and hosts.deny http://www.hmug.org/HowTos/tcpwrappers.html