http://gpp6nwvsps43b3mfacsh433uroo6uyjvvpr6tgj4jh4n5ngxt7rqbvid.onion/posts/openconnect.html
For example, if you always log in from IP address xx.xx.xx.xx , make that the only IP address that will be trusted for SSH access: firewall-cmd --zone=trusted --add-service=ssh firewall-cmd --zone=trusted --add-source=xx.xx.xx.xx/32 firewall-cmd --zone=public --remove-service=ssh firewall-cmd --zone=public --remove-service=cockpit firewall-cmd --runtime-to-permanent If your server runs Debian 10+ or Ubuntu, install and configure your firewall like this.