CSF Allow Defined ip's only for SSH Access

Hello

I want to set SSH access only my defined ip's to my server. Others should be blocked. How can i do it easily. I have defined cloudflare ip's on csf.allow file already so i don't want any mistake and i ask you what is best way to configure it

p.s: my ssh port is not standart port (22)

Thanks

 

I aggree yes but i bought static ip from my ISP, so it is securely.

I don't want to go with method-1 because of i worry about csf-iptables problems.

Method2 is fine, but i don't understand on examples. That website says, use deny list for prevent some ip's. But i want denny all ip's except my ip. So, hosts.allow must be contain my ip then hosts.deny file must be contain that deny all ips ?

Like that? Thanks
# /etc/hosts.allow
sshd: 1.2.3.0

# /etc/hosts.deny
sshd: ALL