On Fri, Mar 22, 2013 at 10:40:18AM +1100, Darren Tucker wrote: > No, not currently.
Bummer. > There is an open enhancement request to let it match subnets, which > may or may not be sufficient for what you want > (https://bugzilla.mindrot.org/show_bug.cgi?id=1169). Not quite. What I was looking for is much simpler than what was described there, and doesn't require worrying about a name resolving to multiple addresses, two passes through the config file, etc. I've written up a patch adding the functionality[0] and submitted it to openssh-unix-dev; what I intended is probably clearer from the examples I gave and the patch. Thanks for your time. Best wishes, Ryan [0] https://lists.mindrot.org/pipermail/openssh-unix-dev/2013-March/031166.html -- |_)|_/ Ryan Kavanagh | Debian Developer | \| \ http://ryanak.ca/ | GPG Key 4A11C97A

