Hi, I am trying to restrict SSH access to only X1P2 (192.168.200.1) port which is connected to a local PLC network and block all connections on X1P1 (dhcp/static) port which is used to connect the IOT2050 to the internet. I don't want the device publicly accessible via SSH through Internet hence X1P1 SSH blocking is required. I did google and came across this article which does the trick: Restrict SSH to one interface

However, it works after making the modification and restarting the SSH service. However, after a reboot of the IOT device, all SSH connections are blocked both on the X1P2 and X1P1 port (very strange). However, I have to restart the SSH service every time. Is there a fix or a better way to do this? It seems like the settings made in SSHD_config file are not updated after a device restart. 

File modified: /etc/ssh/sshd_config

Uncommented: #ListenAddress 192.168.200.1

Restarted the SSH service:systemctl restart ssh.service 

Thanks,

Nisarg

Hi Fe_lipe,

I did install the cron package using

apt-get install cron

command. I also scheduled a cron job using the

crontab -e

command. And added the following line to run the code to restart the ssh service

@reboot systemctl restart ssh.service

 but its still not working. Could you try it out on your end or perhaps any other way it could work?

sleep 10

 to add a 10 s delay on startup. Without, the delay it wasn't working but a 10 sec delay is not a big deal :).

Thank you,