[NTLUG:Discuss] Hook SSHD into sendmail milter?

[Neil Aggarwal]

Chris:

That is a good idea in that I can restrict it to only specific
users from specified hosts.  I just figured that I am already
maintaining the milter and was hoping to use it.

Thanks,
	Neil


--
Neil Aggarwal, JAMM Consulting, (214) 986-3533, www.JAMMConsulting.com
FREE! Valuable info on how your business can reduce operating costs by
17% or more in 6 months or less! http://newsletter.JAMMConsulting.com

> -----Original Message-----
> From: discuss-bounces at ntlug.org 
> [mailto:discuss-bounces at ntlug.org] On Behalf Of Chris Cox
> Sent: Wednesday, July 13, 2005 2:18 AM
> To: NTLUG Discussion List
> Subject: Re: [NTLUG:Discuss] Hook SSHD into sendmail milter?
> 
> 
> Greg Edwards wrote:
> > Neil Aggarwal wrote:
> >>
> >> Is there a way to configure sshd to call a program to check whether
> >> an IP is allowed or not?
> >>
> >> I see that hosts_access in section 3 of the man pages has
> >> this function:
> >>
> >> int hosts_ctl(daemon, client_name, client_addr, client_user)
> >>        char *daemon;
> >>        char *client_name;
> >>        char *client_addr;
> >>        char *client_user;
> >>
> >> Is there a way to get sshd to call a program I write that 
> implements
> >> this method?
> >>
> >> Thanks,
> >>     Neil
> >>
> > 
> > Wouldn't it be easier to do through your firewall?  Or are 
> these IPs 
> > inside?  Using an iptables rule to reject those addresses 
> should get the 
> > trick done, if you're interested in that option.
> > 
> > I've got the SSH book on the shelf, but haven't read it yet so I 
> > couldn't help with that.
> > 
> 
> man sshd_config
> Look for AllowUsers
> 
> Won't that work for you?
> 
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss
>