How can I block a connection to a NoMachine server by IP address?

[leonk]

Hello,

I want to block the possibility of connecting to my NoMachine server by IP. I didn’t see this option, I want the NoMachine server to be only available locally, and I use Tailscale (SSH tunneling) to connect to it. At the moment, I have only set up connection via SSH key, with password disabled.

[Tom]

Hi,
I’m not sure what you want to do?
Do you want to block connection via NoMachine to your computer for some addresses from the local network?
eg. IP 192.168.1.109 can’t connect but IP 192.168.1.165 can.

What OS are you using?
Regards,
Tom

[colonel_panic]

I’m not familiar with Tailscale, but if you’re connecting by SSH you can add from=”ip address” in front of the public key in the .authorized_keys file.

[colonel_panic]

Saying that – passwordless authentication over ssh is already quite good security. Provided no-one gets your private key (and you don’t reuse keys over different machines), IMO you don’t need to worry too much.

Have you actually been logging attempted ssh logins? I would be inclined not to worry too much about the security implications – if you’ve disabled passwords for ssh, people aren’t going to be able to login without a key.

Put it another way – if someone could access my computer via passwordless ssh, I’d be much more worried about my bank being hacked than me!

[Britgirl]

Bear in mind that SSH connections are a feature of NoMachine Enterprise products and are not available in the Free Edition.

[Author]

Posts