restricting originating IP per user

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> What I want is to restrict one user's account to only be able to ssh in

Use the options available in the authorized_keys file. For example:

from="101.202.99.1" 1024 35 124482811179327377929246[..rest of key..]

That limits this key to only be allowed from the specified IP address. Only useful for single IP numbers (you CAN duplicate a key in the authorized_keys file and put a different IP number in for the second instance of the same key, but clumsy for anything more complex than that and may not work in ALL implementations)

Robert Baskerville

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1.2
Comment: www.vistorm.com/pgp

iQGVAwUBPeuBLKLvtZXFYwUMAQIWmwv+Or9cW5ZqnhXS0SvXAjaaQCTO9NOxHEgM LDtJeV+xUJPZvp/BQafJqpYZFKFrgGrAf8LlXX8lqlfFZfXjILJ+1tECNrMKi6wY 0PuJOKdgq7KopCJdPz2AJFL7D9GnvgVlHjXlGUWkAg9gPyH0Om3WV8vL0Sa7HquN vb1rYQ8lpXdAaHitdPnaAJpjZhR+A7SV/CzYJR1JfDJ5IZkcU3icq/Ao7lwj8Z7C yAJhT0N/ApzYYcFhA42LrWaeAuByPDWUxdJus0bnNzTz8dSGaCsLd6vlCi9vQBDH s/QRmYT4E000nPyCswgOEMaavfa54ms2Lcqc4q1IIoTRot0wJf/yfcgsIV21PBXf dSor39X2fVZj3Pf3qLr6PHBkvDdwmhl1DUgUYQD3CJ1jsfJf6xY50OnbzjemJve4 sWEhl1hk57mRlSSjfoWa69kZGDkumQG90DhVEMqGfklr7S9yP4CisWf6UzSe2iUe +hgbAG/VsVmohYXGnUrlg+uZ/SREAO61
=6s9I
-----END PGP SIGNATURE----- Received on Tue Dec 3 12:46:38 2002

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek