How do I only allow SFTP access and restrict just root to certain IP's for SSH login?

[Mac Write]

In an effort to secure my VPS which is for friends/family use, I want to temrinate FTP and only allow SFTP while preventing all other SSH functions. How can I pull this off? I also want to restrict root login to a couple IPs (Datacenter and my home IP), while allowing SFTP access for other users to any IP.

 

[chirpy]

The latter is going to be tricky. The former you can do with the likes of rssh:
http://www.pizzashack.org/rssh/

 

[Mac Write]

Had a friend install rssh last night. He figured it out (nice challenge for him). Works great! Now onto the next level of security run SFTP on a different port then SSH. THen move onto only allow root login via XX IP while leaving SFTP access for any IP.