[mugerwa]

I am trying to create a remote support gateway for our different vendors to access their unix machines on our network via ssh. The requirements for this box are simple each vendor gets assigned a username and password and he uses this to ssh into the remote support gateway from where he can then connect to his box with access to other unix boxes being denied from this specific account. So each username is tied to a specific destination ip address only. Any ideas how i can implement this using ip tables and user accounts on fedora core.

[HROAdmin26]

You mean they actually have a user account and log into the gateway machine?

Why not use the gateway machine to forward their SSH session straight to their destination machine? That would also let you put each SSH server on a non-standard port and the vendor's user account ONLY exists on the machine they get access to. You could also restrict their incoming SSH session to specific IP/ranges.

Example:

Server_A: SSH server on port 3940, user account cisco_support
Server_B: SSH server on port 29934, user account vendor_name

The vendor has to know the gateway name/IP, the port for the SSH server, and his credentials.

[mugerwa]

Thanks for the lead let me try that out.....