There is a server running sshd. We have root permission on it.
Question: How can we disable SCP on it, BUT: allow a given IP to SCP (copy to it, etc.)
Maybe rename the SCP binary and have a "Match User root" entry with the correct scp path or how?
UPDATE: all access should be allowed, only scp need to be blocked*. *but whitelist given IP's for scp