Re: Restricting logins by IP address

[Justin <justinvinn () gmail com>]

Kelly,

I think that with iptables you would have a fairly easy time of
implementing this. I don't know the rules off hand, but just hit up
the man pages or google up some docs.

Admittidly, I've never sat down and used IRIX seriously (although I
have hacked away at it in a few wargames) so this is coming from a
Linux standpoint. Shouldn't be too different...

BTW, IMO, IRIX isn't that great on security. If possible, you might
tant to think about switching to a different *nix varient.

Hope some of that helped.

Peace,
--Justin

On 10/19/05, Keenan Smith <kc_smith () clark net> wrote:
> All,
>
> I've got a machine running IRIX (SGI's Unix) and have a need to control
> access based on IP address.
>
> Similar to the way root can be restricted to logging in only at the
> console, is it possible to restrict logins by regular users to specific
> IP addresses?
>
> What I've got is a directory "ABC" and a user "Larry".  I setup Larry to
> have ABC as his home directory.  What I want to do is restrict Larry's
> login to a specific IP address so if he attempts a login from computer
> "123" it will succeed but if he tries from computer 456, it will fail.
>
> Any ideas?
>
> Thanks
> Keenan Smith