Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Allow user@ip_good but deny user@any_other_ip in sshd. Post 302448118 by zaxxon on Wednesday 25th of August 2010 10:13:30 AM
Old 08-25-2010
As already stated in the quoted man page from sshd_config you 1st deny and then allow for users.

Edit:
Quote:
The allow/deny directives are processed in the following order: DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups.

Last edited by zaxxon; 08-25-2010 at 11:35 AM.. Reason: pointing out importance of order
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Deny dba command to a user group!!

Dear all i am relatively new in using UNIX i have a problem, We are using IBM Informix Dynamic Server Version 9.40.FC7W4 we have 2 bsic user groups that we are using the 1st is root and another i wasnt to restrict the command "dba" that takes the users of that group to the database. I have... (3 Replies)
Discussion started by: masquerer
3 Replies

2. Shell Programming and Scripting

How do i change to super user then revert back to ordinary user ,using shell script?

Hi all, I am trying to eject the cdrom from a livecd after certain stage... Now assuming that it is possible to eject,please consider my issue!!! The OS boots into a regular user by default...so i am unable to use the eject command to push out the drive... However if i try pfexec eject it... (3 Replies)
Discussion started by: wrapster
3 Replies

3. UNIX for Dummies Questions & Answers

Difference between : Locked User Account & Disabled User Accounts in Linux ?

Thanks AVKlinux (3 Replies)
Discussion started by: avklinux
3 Replies

4. Shell Programming and Scripting

root user command in shell script execute as normal user

Hi All I have written one shell script for GPRS route add is given below named GPRSRouteSet.sh URL="www.google.com" VBURL="10.5.2.211" echo "Setting route for $URL for GPRS" URL_Address=`nslookup $URL|grep Address:|grep -v "#"|awk -F " " '{print $2}'|head -1` echo "Executing ... (3 Replies)
Discussion started by: mnmonu
3 Replies

5. Solaris

User entry in both cron.allow and cron.deny

Hello All, Anybody please help me to know ,what happens when a user having entry in both cron.allow and cron.deny files.Wheather the user will be able to access the crontab??? Thanks in advance Vaisakh (5 Replies)
Discussion started by: ksvaisakh
5 Replies

6. UNIX for Advanced & Expert Users

Determining if user is local-user in /etc/passwd or LDAP user

Besides doing some shell-script which loops through /etc/passwd, I was wondering if there was some command that would tell me, like an enhanced version of getent. The Operating system is Solaris 10 (recent-ish revision) using Sun DS for LDAP. (5 Replies)
Discussion started by: ckmehta
5 Replies

7. Shell Programming and Scripting

Update LDIF User info based on Test User Certs ID's

Hi I need help.......... I have an Sun One Directory server LDIF file with 5000 user entries, I need to change the data to match Test ID's, so I can run a perf test. I'm way out of my league as I have not done any scripting for 10 years. There are four entries for each user in the file... (3 Replies)
Discussion started by: Macdaddy99
3 Replies

8. Solaris

Is it possible to deny a user to use Vi editor in Solaris?

Hi, I want to deny Vi editor to few users, is it possible to do the same in Solaris 10. If yes, then how? Thanks in advance............ (2 Replies)
Discussion started by: ajhal04
2 Replies

9. UNIX for Dummies Questions & Answers

Switching from root to normal user takes me to user's home dir

Whenever i switch from root to another user, by doing su - user, it takes me to home directory of user. This is very annoying as i want to be in same dir to run different commands as root sometimes and sometimes as normal user. How to fix this? (1 Reply)
Discussion started by: syncmaster
1 Replies

10. Shell Programming and Scripting

How to Switch from Local user to root user from a shell script?

Hi, I need to switch from local user to root user in a shell script. I need to make it automated so that it doesn't prompt for the root password. I heard the su command will do that work but it prompt for the password. and also can someone tell me whether su command spawns a new shell or... (1 Reply)
Discussion started by: Little
1 Replies
Qpsmtpd::DSN(3pm)					User Contributed Perl Documentation					 Qpsmtpd::DSN(3pm)

NAME
Qpsmtpd::DSN - Enhanced Mail System Status Codes - RFC 1893 DESCRIPTION
The Qpsmtpd::DSN implements the Enhanced Mail System Status Codes from RFC 1893. USAGE
Any qpsmtpd plugin can access these status codes. All sub routines are used the same way: use Qpsmtpd::DSN; ...; return Qpsmtpd::DSN->relaying_denied(); or return Qpsmtpd::DSN->relaying_denied("Relaying from $ip denied"); or return Qpsmtpd::DSN->relaying_denied(DENY,"Relaying from $ip denied"); If no status message was given, it will use the predefined one from the RFC. If the first argument is numeric, it will use this as a return code, else the default return code is used. See below which default return code is used in the different functions. The first example will return (DENY, "Relaying denied"); the others (DENY, "Relaying from $ip denied"); which will be returned to qpsmtpd. In those sub routines which don't start with addr_, sys_, net_, proto_, media_, sec_ I've added a default message which describes the status better than the RFC message. ADDRESS STATUS
addr_unspecified X.1.0 default: DENYSOFT no_such_user, addr_bad_dest_mbox X.1.1 default: DENY addr_bad_dest_system X.1.2 default: DENY addr_bad_dest_syntax X.1.3 default: DENY addr_dest_ambigous X.1.4 default: DENYSOFT addr_rcpt_ok X.1.5 default: OK addr_mbox_moved X.1.6 default: DENY addr_bad_from_syntax X.1.7 default: DENY addr_bad_from_system X.1.8 default: DENY MAILBOX STATUS
mbox_unspecified X.2.0 default: DENYSOFT mbox_disabled X.2.1 default: DENY ...but RFC says: The mailbox exists, but is not accepting messages. This may be a permanent error if the mailbox will never be re-enabled or a transient error if the mailbox is only temporarily disabled. mbox_full X.2.2 default: DENYSOFT mbox_msg_too_long X.2.3 default: DENY mbox_list_expansion_problem X.2.4 default: DENYSOFT MAIL SYSTEM STATUS
sys_unspecified X.3.0 default: DENYSOFT sys_disk_full X.3.1 default: DENYSOFT sys_not_accepting_mail X.3.2 default: DENYSOFT sys_not_supported X.3.3 default: DENYSOFT Selected features specified for the message are not supported by the destination system. This can occur in gateways when features from one domain cannot be mapped onto the supported feature in another. sys_msg_too_big X.3.4 default DENY NETWORK AND ROUTING STATUS
net_unspecified X.4.0 default: DENYSOFT net_directory_server_failed, temp_resolver_failed X.4.3 default: DENYSOFT net_system_congested X.4.5 default: DENYSOFT net_routing_loop, too_many_hops X.4.6 default: DENY, but RFC says: A routing loop caused the message to be forwarded too many times, either because of incorrect routing tables or a user forwarding loop. This is useful only as a persistent transient error. Why do we want to DENYSOFT something like this? MAIL DELIVERY PROTOCOL STATUS
proto_unspecified X.5.0 default: DENYSOFT proto_invalid_command X.5.1 default: DENY proto_syntax_error X.5.2 default: DENY proto_rcpt_list_too_long, too_many_rcpts X.5.3 default: DENYSOFT proto_invalid_cmd_args X.5.4 default: DENY proto_wrong_version X.5.5 default: DENYSOFT MESSAGE CONTENT OR MESSAGE MEDIA STATUS
media_unspecified X.6.0 default: DENYSOFT media_unsupported X.6.1 default: DENY media_conv_prohibited X.6.2 default: DENY media_conv_unsupported X.6.3 default: DENYSOFT media_conv_lossy X.6.4 default: DENYSOFT SECURITY OR POLICY STATUS
sec_unspecified X.7.0 default: DENYSOFT sec_sender_unauthorized, bad_sender_ip, relaying_denied X.7.1 default: DENY sec_list_dest_prohibited X.7.2 default: DENY sec_conv_failed X.7.3 default: DENY sec_feature_unsupported X.7.4 default: DENY sec_crypto_failure X.7.5 default: DENY sec_crypto_algorithm_unsupported X.7.6 default: DENYSOFT sec_msg_integrity_failure X.7.7 default: DENY perl v5.14.2 2009-04-02 Qpsmtpd::DSN(3pm)
All times are GMT -4. The time now is 08:54 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy