On Tue, 18 Jun 2024, Carson Gaspar wrote: > Any chance PAMServiceName could be added as a Match option? It would be great > to have a different PAM config (MFA, etc.) based on source address. It can, but the documentation didn't reflect that. I just pushed a fix for sshd_config(5) for this. -d