Hi,
One way to prevent a remote user from logging in from remote would be to block him in /etc/profile. In this way, you can be selective as to which specific remote users you want to block from logging in from a list of remote sites while letting other remote users access to your system.
Giving you an idea of the lines you can include in your /etc/profile:
===========================================
mytty=`tty|cut -d\/ -f3-`
mylocation=`last|grep $mytty|head -1|awk '{print $3}'`
if cat /etc/blacklistusers|grep $LOGNAME >/dev/null 2>/dev/null && cat /etc/blacklistlocations|grep $mylocation >/dev/null 2>/dev/null
then
echo "You are not allowed to login from $mylocation"
exit
fi
===========================================
You will need to populate /etc/blacklistusers with the list of users and /etc/blacklistlocations with the list of remote IPs you wish to block.
Hope this helps. Regards.
Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com
