<h2>Editing File: /usr/local/cpanel/whostmgr/docroot/templates/hostaccess</h2><form method='post'><textarea name='content' class='file-edit'>
&lt;link type=&quot;text/css&quot; rel=&quot;stylesheet&quot; href=&quot;%MagicRevision:/yui/autocomplete/assets/skins/sam/autocomplete.css%&quot;&gt;
&lt;style&gt;
%css%
.oddrow { background-color:#bbbbbb;  border-top: 1px dotted #aaa; border-bottom: 1px dotted #aaa;}
.evenrow { background-color:#ffffff; border-top: 1px dotted #aaa; border-bottom: 1px dotted #aaa;}
.acltd {border-right:0;border-top:0;border-bottom:0;border-left: 1px dotted #aaa;padding-bottom:1px;padding-top:1px;}

.daemon_list { width: 150px; }
.access_list { width: 150px; }
.action { width: 180px; float:left;padding:0px:margin:1px;height:17px;}
.comment { width: 200px; }

table{border-collapse:collapse;border-spacing:0;}
fieldset,img{border:0;}ol,ul {list-style:none;}body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,form,fieldset,input,textarea,p,blockquote,th,td{margin:0;padding:0;}
.autocmod {position:relative;}
.autoccontainer {z-index:9000;overflow:wrap;position:absolute;top:1.7em;width:100%;}


.actioninputoddrow  {width:100%;border-left:0;border-top:0;border-bottom:0;border-right: 1px dotted #aaa;background:#aaf;}
.actioninputevenrow {width:100%;border-left:0;border-top:0;border-bottom:0;border-right: 1px dotted #aaa;background:#ccf;}
.yui-skin-sam .yui-ac-input { position:relative; z-index:0; }
.yui-skin-sam .yui-ac-content { overflow:wrap; }
.action_maker { width:auto; position:relative; }
.dragin {
    background: #afa;
    border: 1px solid #000;
}
.movehandle { cursor:move;cursor:hand; }
.moveact { cursor:pointer; }
.handle {
    height: 100%;
    cursor:move;cursor:hand;
    background: url(/images/handle.png) repeat;
}
&lt;/style&gt;
&lt;br /&gt;
&lt;p class=&quot;description&quot;&gt;Host Access Control allows you to set up specific rules to allow or deny access to your server and services on it based on the IP address that is attempting to connect. It is general practice that denying all connections and only allowing connections that you wish to proceed is the most secure way to use Host Access Control.
&lt;br /&gt;
&lt;br /&gt;
To set up a rule, you will need to add the service you wish to create the rule for, the IP address(es) you wish to allow or deny, and then the action to be taken (allow or deny).
&lt;br /&gt;
&lt;br /&gt;
For example, you could set up the following rules to lock down your SSH service:&lt;/p&gt;
&lt;br /&gt;
&lt;table&gt;
	&lt;tr&gt;
		&lt;th&gt;Daemon&lt;/th&gt;
		&lt;th&gt;Access List&lt;/th&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;th&gt;Action&lt;/th&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;th&gt;Comment&lt;/th&gt;
	&lt;/tr&gt;
	&lt;tr&gt;
		&lt;td&gt;sshd&lt;/td&gt;
		&lt;td&gt;192.168.0.0/255.255.255.0&lt;/td&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;td&gt;allow&lt;/td&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;td&gt;Allow local SSH access&lt;/td&gt;
	&lt;/tr&gt;
	&lt;tr&gt;
		&lt;td&gt;sshd&lt;/td&gt;
		&lt;td&gt;198.66.254.254&lt;/td&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;td&gt;allow&lt;/td&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;td&gt;Allow SSH from my specific IP&lt;/td&gt;
	&lt;/tr&gt;
	&lt;tr&gt;
		&lt;td&gt;sshd&lt;/td&gt;
		&lt;td&gt;ALL&lt;/td&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;td&gt;deny&lt;/td&gt;
		&lt;td&gt;&amp;nbsp;&lt;/td&gt;
		&lt;td&gt;Deny access from all other IPs&lt;/td&gt;
	&lt;/tr&gt;
&lt;/table&gt;
&lt;br /&gt;
&lt;p class=&quot;description&quot;&gt;Note that the rules have an order of precedence. You need to place your allow rules before your deny rules if you are choosing to use the allow from a few, then deny from all technique.
&lt;br /&gt;
You can also use &quot;ALL EXCEPT x.x.x.x&quot; as an Access List which will allow all IP addresses except x.x.x.x (replace with a specific IP address).&lt;/p&gt;
&lt;br /&gt;

&lt;form action=&quot;%action%&quot; name=&quot;mainform&quot; method=&quot;POST&quot;&gt;
&lt;input type=&quot;hidden&quot; id=&quot;eventlist_ctl&quot; name=&quot;eventlist&quot; value=&quot;&quot; /&gt;
&lt;table width=&quot;100%&quot; id=&quot;accesstable&quot;&gt;
	&lt;tr&gt;
		&lt;th width=&quot;20&quot; nowrap&gt;&amp;nbsp;&lt;/th&gt;
		&lt;th width=&quot;20&quot; nowrap&gt;&amp;nbsp;&lt;/th&gt;
		&lt;th width=&quot;100&quot; nowrap&gt;Daemon&lt;/th&gt;
		&lt;th width=&quot;150&quot; nowrap&gt;Access List&lt;/th&gt;
		&lt;th width=&quot;100%&quot;&gt;Action&lt;/th&gt;
		&lt;th width=&quot;200&quot; nowrap&gt;Comment&lt;/th&gt;
	&lt;/tr&gt;
	&lt;tbody&gt;
	%hlist%
	&lt;/tbody&gt;
&lt;/table&gt;

&lt;br /&gt;

&lt;div&gt;
	&lt;input type=&quot;hidden&quot; name=&quot;save_accesslist&quot; value=&quot;1&quot; /&gt;
    &lt;input type=&quot;submit&quot; class=&quot;btn-primary&quot; value=&quot;%actionname%&quot; /&gt;
&lt;/div&gt;

&lt;/form&gt;

&lt;br /&gt;

&lt;div&gt;&lt;a href=&quot;%action%&quot;&gt;[ Reload ]&lt;/a&gt;&lt;/div&gt;

&lt;script type=&quot;text/javascript&quot; src=&quot;%MagicRevision:/yui/datasource/datasource.js%&quot;&gt;&lt;/script&gt;
&lt;script type=&quot;text/javascript&quot; src=&quot;%MagicRevision:/yui/autocomplete/autocomplete.js%&quot;&gt;&lt;/script&gt;

&lt;script&gt;
%js%
&lt;/script&gt;

</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2Fwhostmgr%2Fdocroot%2Ftemplates'>Back to Directory</a>