topic Re: enabling ssh to certain computer in Network Security https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759698#M1021310 <HTML><HEAD></HEAD><BODY><P>You need to have the permit line before the deny line.</P><P></P><P>access-list inside permit tcp host 192.168.1.10 any eq ssh </P><P>access-list inside deny ip host 192.168.1.10 any</P><P></P><P>Please rate helpful posts.</P></BODY></HTML> Tue, 10 Jul 2007 12:29:48 GMT acomiskey 2007-07-10T12:29:48Z enabling ssh to certain computer https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759695#M1021303 <P>I have few computers behind PIX 501. Few of them has no access to internet (access-list inside line 1 deny ip host 192.168.1.10 etc) and others have full access. Now I want to give some of those denied computers an SSH access to outside. I have tried </P><P>access-list inside line 6 permit tcp host 192.168.1.10 eq ssh any eq ssh </P><P>, but SSH-client says Connection Refused. Do I need some other access-rules or is the problem somewhere else?</P> Mon, 11 Mar 2019 10:42:34 GMT https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759695#M1021303 jamesi123 2019-03-11T10:42:34Z Re: enabling ssh to certain computer https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759696#M1021304 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>Source port may not be 22, depends on the client coding. Change your ACL line to:</P><P></P><P>access-list inside line 6 permit tcp host 192.168.1.10 any eq ssh </P></BODY></HTML> Tue, 10 Jul 2007 10:43:06 GMT https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759696#M1021304 dominic.caron 2007-07-10T10:43:06Z Re: enabling ssh to certain computer https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759697#M1021307 <HTML><HEAD></HEAD><BODY><P>That change didn't seem to work. It seems that outbound connection works, but inbound doesnt. access-list inside line 1 deny ip host 192.168.1.10 gets hits when i try to SSH out from the computer.</P></BODY></HTML> Tue, 10 Jul 2007 12:28:18 GMT https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759697#M1021307 jamesi123 2007-07-10T12:28:18Z Re: enabling ssh to certain computer https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759698#M1021310 <HTML><HEAD></HEAD><BODY><P>You need to have the permit line before the deny line.</P><P></P><P>access-list inside permit tcp host 192.168.1.10 any eq ssh </P><P>access-list inside deny ip host 192.168.1.10 any</P><P></P><P>Please rate helpful posts.</P></BODY></HTML> Tue, 10 Jul 2007 12:29:48 GMT https://community.cisco.com/t5/network-security/enabling-ssh-to-certain-computer/m-p/759698#M1021310 acomiskey 2007-07-10T12:29:48Z