Question is:How do we only allow specific users coming from either their domain or using our domain in an appropriate way (SSH/SFTP)?E.G.jonnycustomer@ourdomain.com coming from customersIPaddress is Deniedandjonnycustomer@ourdomain.com coming from randomIPaddress is not allowedandjonnycustomer@ourotherdomain.com is not allowedIn Centos 7, our sshd_config has this additional config:Match Address 192.168.1.0/24        AllowUsers bob trevMatch Address *,!192.168.1.0/24        AllowGroups sftpgroupMatch AllPermitRootLogin nosftpgroup is a group of our customers, that have their own root directories.but the above config UNFORTUNATELY Allows our customers' employees to login from unknown ip addresses, and it also allows them to use one of our other domains to login.I tried this, and external users/groups stopped working:Match Address 192.168.1.0/24    AllowUsers bob trevMatch Address *,!192.168.1.0/24    AllowUsers customer1@ourdomain.com    AllowGroups sftponlyMatch AllPermitRootLogin noNB: bob and trev are our employees who only access from internally (they are not in the sftpgroup)
How do we only Allow Users/Groups from specific Domains(ours or theirs) to access ssh/sftp?
centos;ssh;sshd;sftp