optional
nano /etc/ssh/sshd_config
AllowUsers root@192.0.2.100
Replace 192.0.2.100 with your allowed IP.
If not present, add it (replace root with your SSH user if needed).
✅ 2. Enforce SSH Access from a Single IP
A. Restrict in CSF
nano /etc/csf/csf.conf
Set the following:
# Remove or comment out SSH port from TCP_IN
TCP_IN = “…”
# Allow SSH from only your IP
ALLOW_FILTER = “192.0.2.100”
Then reload CSF:
csf -r
