From: J.D. Bronson [mailto:[EMAIL PROTECTED] > Is there any way to accomplish this: > > 1. Use ssh with passwords internally (lan to lan connections) > 2 Use ssh with publickeys externally (wan to lan connections) > > ...thanks!
I can't think of a way to do it with the same user account, but you could handle it for different users by not setting a password for users that will only connect externally, and set them up for key-based auth, and then do keys + set a password for internal user accounts. Alternatively, you may be able to use some PF magic to get external users redirected to an sshd listening on a different port on the box - one configured for only pubkey auth. DS

