forum.excito.org

Hi
There is something as being too secure

I have a B2 at my father-in-laws house and it only accepts ssh connections from my IP.
Now the ISP gave me a new IP and ... no connectivity ... works as designed.
So I went over to him to add the new IP or rather the DNS name to the allow.hosts file.
But no ssh... then I remembered... I forgot to add the local subnet to the allow.hosts file! Doh!

Of course I can open up the B2 and stick it in another PC or USB box,
but I wondered if I am overlooking another way to gain access to the /etc directory and remove or modify the allow.hosts en deny.hosts files. So I can access the B2 over ssh again.

Boot it from a rescue stick?

yep that's it unfortunately. Be glad, because your security would not be worth much if there was a software method to circumvent your IP restrictions.

As an alternative method; why not forget about the IP restriction, but put the SSH on an alternative port and allow key-login only. That is equally secure but much more flexible