in reply to Run only if it the request is originating from a specific machine

My ssh server sets up some env vars:

$ ssh user@host set | grep -i ssh SSH_CLIENT='1.2.3.4 52714 22' SSH_CONNECTION='1.2.3.4 52714 2.3.4.5 22'

1.2.3.4:52714 is the ssh client
2.3.4.5:22 is the ssh server

Of course, those can be faked. (e.g. ssh oracle@dbhost1 "SSH_CLIENT='127.0.0.1 1234 22' /opt/oracle/runroot.pl")