SSH: Key Auth from everywhere, Password allowed IP only

Hi everyone

I recently installed a CP for managing my VPS which requires root login (yep, that's bad..).

To keep the server more or less secure, I would love to have the following:

- Is it possible, that you allow key based auth from everywhere for user root
BUT
- password based auth for user root only from defined IP/Subnet?

I read about the match statement in sshd_config, but I couldn't figure out how to do it correctly.

Help is really appreciated

Thank you,
Regards,
MaddinXx

 

http://scottlinux.com/2011/03/16/ssh-password-login-from-specific-ip-ranges/

 

Hi falko

Thank you for the link! Exactly what I was looking for

Regards
MaddinXx