Whitelisting the sshd allowed addresses can work by adding a special internal IP that uses Tor's mapadddress to refer to some onion address generated for SSH access later on.
https://www.golinuxcloud.com/restrict-allow-ssh-certain-users-groups-rhel/
Description
Description
Details
Details
- Impact
- Normal
Event Timeline
Comment Actions
This is for whonix.org server security?
Due to the months ongoing DDoS on the Tor network, I don't think this would be reliable. Big risk of locking oneself out of the server. Therefore not implementing this and rejecting this ticket. Could be re-opened if these issues are one day resolved and onions being reliable and DDoS resistant.
references: