To allow specific IPs login to FTP server I'm using
Code:
<Limit LOGIN>
Deny from all
Allow from xx.xxx.xx.xx
Allow from xx.xxx.xx.xx
(where x there is IP numbers)
and so on, for all IPs I give access to.
But now I have question, is it possible to make something like this but just for specific users? For example there is user 'user1', how to allow login IP 77.77.77.77 to 'user1' account and deny all others ?
i am using openssh 5.2-p1, i want to restrict user "admin" to login to the server from a specific IP address, for this purpose i have tried the following blocks in sshd_config file.Following is the part of the sshd_config file which i have modified
#The following commands will only allow specific IP to login to ssh.
#AllowUsers admin user1 user2
#AllowGroups
# override default of no subsystems.Subsystem sftp internal-sftp
Match Group sftpgroup
ChrootDirectory /home
AllowTCPForwarding no[code].....
i want to restrict admin user to login to the server only from 172.16.100.221 IP which can be done by using AllowUser line, but i dont want to use AllowUser line,
I'm trying to configure our mail server to block email from a specific sender reaching a specific recipient. In other words, if one of our employees is getting harassed by a 'stalker', how would one go about blocking, at the MTA (Sendmail) level, a specific sender email address from reaching a particular users inbox? We do not want to capture the email - simply block it before it consumes server resources.The Sendmail server (MTA) is a front end to our Exchange server so no user accounts exist on the Linux server. We simply use it as a SPAM and Virus scanner then forward clean email to the Exchange server.
View 6 Replies View RelatedI configure squid to work with squidGuard , and all thing work properly , but there is problemfirst look to this squidGuard.confdhhome /usr/local/squidGuard/dblogdir /usr/local/squidGuard/log
src blacklist {
ip 10.0.0.5
}
[code]...
I have a very peculiar issue - I can't log in to KDE as one particular user (andrew, which is my regular account) though all other users including root, mythtv & other family members can log in without any problem. When I try to login as andrew the X server appears to crash as the screen goes blank and I have to press Ctrl+Alt+BkSp to get back to the KDM login screen. The proximate cause seems to have been updating KDE to 4.4.5 using yum - I did this logged in as andrew in a terminal session using su - root, and the black screen problem arose next time I tried to log in.
I can log in OK as andrew using a different desktop manager e.g. Sugar. I am using radeonhd graphics driver; if I change to "vesa" in xorg.conf I can log in OK. If I change the home directory for andrew to that of another test user and change the file ownerships, I can log in OK. Therefore the problem must lie in a config file(s) somewhere in the andrew home directory tree, which is specific to KDE and also radeonhd. I have checked in all the obvious (and unobvious) places but can't find anything. There are no relevant SELinux errors or entries in syslog or Xorg.0.log. The .xsession-errors file from a failed login attempt is here [URL] it isn't significantly different from a normal one, and as the entries are not time-stamped I am not sure which ones arise during the login and which when I restart the X server. I am running F13 (kernel 2.6.33.6-147.fc13.x86_64) without any other significant issues.
Need to restrict cvs login from specific IPs
in file /etc/security/access.conf
+ : builduser : 10.200.2.1
Do not work
when changed to ALL as below it works
+ : builduser : ALL
I'm working on a kiosk-type system. What it needs to do is boot, auto login as a specific user, display only the Gnome desktop (no icons, etc), and auto start an application.
Is this possible (I'm sure it is)? If so, can this be scripted, i.e. without having to use graphical tools like Sabayon.
Can anyone imagine a way to set certain TTY's to show specific programs upon login?
If I were to log in under my normal account, it'd be cool if I could set one up to load top upon authentication, maybe watch tail /var/log/syslog on another, and so on.
I know they require authentication, but would there be a way to say on startup if isTTY and TTYnum=y and if user=x execute script z?
I'd like to limit login attempts for specific user. I've found information in manpages: [URL]but I'm not sure if this '@' is purposly there, so would be that correct?
Code:
aparaho - maxlogins 4
or
Code:
@aparaho - maxlogins 4
Maybe '@' is a group syntax? I'm confused.
What happens after 4 failed loggins? Is it enough to restart system to get another login attempts?
Are there any other values that it is reasonable to limit for safety reasons?
Can advise if I want to have a alert message when a specific user is login to the system , what can I do ? that mean if a specific is login to system then send me a alert message ( by any way ) to inform me the user is login , what is the method ?
View 7 Replies View RelatedI like the server login information that gets displayed when you login to a 10.04 server. It lists disk usage, CPU usage, Temperature etc...
Unfortunately I had problems installing 10.04 from a USB. At the end of the process the master boot record was stored on the USB and not the hard disk.
But now when I login to my server I don't get the server information.
Having installed Debian 7 on an old machine from a Liinux Format Magazine DVD I was unable to log in as a specific user. I can login as root and use useradd etc but when I logout of root I still cannot login as a user and nor will the machine accept my root password. I have to shutdown and reboot to get back into root. I'm using O'Reilly's Linux Pocket Guide from 2004 for the commands. Could it be that things have changed?
View 9 Replies View RelatedI am not able to login to server from console attached to server, every time i enter username & password but it again asks for username & password. But when i try to login to server from remote machine, login happens properly.
View 4 Replies View RelatedHow do I give permission to a logged in user to stop/start a specific service without entering a root/sudo password? So they can do a simple "service SomeService stop|start" It is for a headless Ubuntu server.
View 5 Replies View RelatedI need to search a bunch of files in a specific folder for a specific number and add all the numbers together to a total sum. I use Rsync everyday, everytime I run rsync i get a logfile (rsync output) witch contains the textstring "Total bytes sent: xxxxxx".
The "xxxxx" can vary in lenght. I need to extract the "xxxxxx" from each file and add the numbers together to a total size over a week or a month. Is this possible? And I wish to only use bash. One way of doing stuff at a time my friends .
my system I want user1 and only user1 to be able to mount and unmount a specific partition, this partition contains backups and is usually mounted read only, needs to be temporarily mounted read/write by user1 while doing the backup.user1 is an unprivileged user. I've read that the user option will let any user mount the file-system (and only that user can then subsequently unmount it) and that the users option allows any user to mount or unmount the file-system.I also found this in mount's man pageQuote:The owner option is similar to the user option, with the restriction that the user must be the owner of the special file. This may be useful e.g. for /dev/fd if a login script makes the console user owner of this device. The group option is similar, with the restriction that the user must be member of the group of the special file.So it looks like I'd need a login script for that user to make the user owner of the device file (/dev/voiceserv/backup in this case)
View 7 Replies View Relatedfor example
else {
for fileDOC in $location/*.doc
do
[code]...
how to set up a specific home server. What I'd like to do is set up my home server to check mail from various ISP's that use either POP3 or IMAP, then make that mail available to a local IMAP server.
Meaning... Server would just check every nn minutes to see if there is new mail at 2-3 different ISP's and if so, copy/move the messages to my server where I would use an IMAP client to check locally from my server. Before anyone mentions forwarding, neither of the ISP's does not offer forwarding services.
I want to run a specific command from one server to another. For example I have a server called A(client) and a server called B(Server). How would i fire a command on Server(B) while working on Client(A). One way of doing it is using ssh
"ssh -tq 10.180.8.231 ls -ltr"
but whenever i execute the command it ask for the password. How would i reduce effort of putting password again and again.
I want to restrict the type of files that can be accessed on my web server.For example only flash movies (SWF files) and one specific PHP file.I can think of a number of ways of doing this:1. Linux file permissions, but since the SWF files need to access various PHP files and those PHP files need access to other files themselves that may not work.2. Using mod_rewrite if that is possible, I don't know as I have never used it.
View 1 Replies View Relatedhow to allow mount in iptables for specific ip?
View 9 Replies View RelatedHow do I get FTP to use a specific port number? .. I read the manual but cannot work this one out.
View 2 Replies View RelatedI want to replace specific character in a file after every specific line. example as follows.
O 000000000000000000
A 111111111111111111
C 222222222222222222
[code]...
how would I backup a specific package. Really all I want is the configuration files.
the package I'm talking about is mumble-server, could I say rsync all the files that were installed, then if I wanted to drop it in just copy those back over?
If I had to wipe the installation and reinstall, could I install that package again then drop my backup copy back over it?
Dpkg tells me these are the files it installed.
Code:
dpkg-query -L mumble-server
/.
/var
/var/log
[Code].....
This is probably an odd request, but figured I'd ask in case someone knew. We have a lab that has the IP range 172.10.0.0/16 (255.255.0.0). The lab gateway/DHCP assigns an IP in the range of 172.10.0.2-172.10.0.254. I want to set up my own DHCP server on a specific range, for example 172.10.10.1-172.10.10.254. I create a new host fine, but since it's set for DHCP, it uses the DHCP server at 172.10.0.1. Is there a way to force it to use a different DHCP server on the client side? I realize that I can work around this with exclusions on the 172.10.0.1 DHCP server, or use iptables to deny DHCP requests to specific MACs, but wanted to know if there was an (easier?) way to configure the client to use the 172.10.10.1 DHCP server instead of the 172.10.0.1 server?
View 1 Replies View RelatedI would like to COMPLETELY block a specific IP address using iptables. I found this one:
Code:
iptables -A INPUT -p tcp -s xxx.xxx.xxx.xxx -j REJECT --reject-with tcp-reset
Will this work? How do I undo the changes later?
I have create distro groups in zimbra and have add member sin there. when i connect an account on mapi etc. [URL] i have create a persona in order client to send from [URL] rather than [URL] How can i restrict inside postfix to relay using [URL]?
View 1 Replies View Relatedi have been studying linux for 3 month ,so i have solved some problems related with server part.The problem i have is the squid access.Can I allow some IP's to download files on squid.I mean i already give access to download by reply_body tag,andwant to give permission only one specific IP for unlimit access to download.Is there any solution
View 3 Replies View RelatedI m using sendmail-8.13.8-2.el5 along with MailScanner-4.79.11-1
i want to set a rule so that user1@mydomain.com can send only to anotherdomain.com domain. sending mail to any other domain will be rejected. can it be done by sendmail or MailScanner ??
I have the following in my httpd.conf file
Code:
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive. Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#Listen 12.34.56.78:80 Listen 80
And when I try to start the server, I get the following
Code:
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:80. I did have an Apache web server up and running about 6 or 7 years ago - but seem to have lost everything