From: J.D. Bronson [mailto:[EMAIL PROTECTED]
> Is there any way to accomplish this:
> 
> 1. Use ssh with passwords internally (lan to lan connections)
> 2  Use ssh with publickeys externally (wan to lan connections)
> 
> ...thanks!

I can't think of a way to do it with the same user account, but you could
handle it for different users by not setting a password for users that will
only connect externally, and set them up for key-based auth, and then do
keys + set a password for internal user accounts.

Alternatively, you may be able to use some PF magic to get external users
redirected to an sshd listening on a different port on the box - one
configured for only pubkey auth.

DS

Reply via email to