On Thu, 2020-08-27 at 15:48 +0100, Victor Ivanov wrote: > On 27/08/2020 14:40, Grant Edwards wrote: > > I do _not_ want it to listen on 0.0.0.0. > > > > I want it to listen on 127.0.0.1 and on whatever IP addresses are > > assigned to two specified interfaces. > > As far as I'm aware, I don't think OpenSSH allows for listening on a > specific interface.
This is my understanding as well. Were I in your situation, I think my somewhat ham-fisted approach would be to write a script to edit sshd_config and restart the service, using a dhcpcd hook to run it after the interface comes up. Not really elegant but I feel it might be simpler than the netfliter solution.