From owner-freebsd-isp@FreeBSD.ORG  Mon Jun 21 08:52:06 2004
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A301916A4CF
	for <freebsd-isp@freebsd.org>; Mon, 21 Jun 2004 08:52:06 +0000 (GMT)
Received: from mail.vtec.ipme.de (naen-d9b80aca.pool.mediaWays.net
	[217.184.10.202])
	by mx1.FreeBSD.org (Postfix) with ESMTP id ECCD443D46
	for <freebsd-isp@freebsd.org>; Mon, 21 Jun 2004 08:52:00 +0000 (GMT)
	(envelope-from volker@vwsoft.com)
Received: by bellona.sz.vwsoft.com (Postfix, from userid 9002)
	id 22D721072C; Fri, 18 Jun 2004 23:02:10 +0200 (CEST)
X-Scanned-By: clam-av using AMaViS-ng at bellona.sz.vwsoft.com
Received: from [192.168.16.24] (unknown [192.168.16.24])
	by bellona.sz.vwsoft.com (Postfix) with ESMTP id 349EA1072A
	for <freebsd-isp@freebsd.org>; Fri, 18 Jun 2004 23:01:58 +0200 (CEST)
Message-ID: <40D35845.1050200@vwsoft.com>
Date: Fri, 18 Jun 2004 23:01:57 +0200
From: Volker <volker@vwsoft.com>
User-Agent: Mozilla Thunderbird 0.7 (Windows/20040616)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-isp@freebsd.org
X-Enigmail-Version: 0.84.1.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: scp only connection
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jun 2004 08:52:06 -0000

Hi!

Does anybody know if it's possible to have a user scp'ing only on a 
FreeBSD machine and deny ssh access?

I've got an sshd running and want one user only use scp but disallow ssh 
access. I've tried to set the shell to /bin/false but then even scp 
won't be accessible (does anybody know why??).

This machine does not have an ftpd installed (and I don't want to).

Is there a way to restrict an ssh user to scp only?

Thx,

Volker