From owner-freebsd-isp@FreeBSD.ORG Mon Jun 21 09:03:17 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8146716A4CE for ; Mon, 21 Jun 2004 09:03:17 +0000 (GMT) Received: from mx0.estimese.net (finom.estimese.net [195.168.3.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id B20F043D5D for ; Mon, 21 Jun 2004 09:03:16 +0000 (GMT) (envelope-from robert@bopko.com) Received: from wendy.in.nextra.sk (fw.nextra.sk [195.168.29.2]) (AUTH: LOGIN zero, SSL: TLSv1/SSLv3,256bits,AES256-SHA) by mx0.estimese.net with esmtp; Mon, 21 Jun 2004 11:03:13 +0200 From: Robert Bopko To: Volker In-Reply-To: <40D35845.1050200@vwsoft.com> References: <40D35845.1050200@vwsoft.com> Message-Id: <1087808591.6302.5.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.4.6 Date: Mon, 21 Jun 2004 11:03:11 +0200 cc: freebsd-isp@freebsd.org Subject: Re: scp only connection X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2004 09:03:17 -0000 Hey Volker, take a look at /usr/ports/shells/scponly port, it should satisfy your needs. Kind regards, Robert On Fri, 2004-06-18 at 23:01, Volker wrote: > Hi! > > Does anybody know if it's possible to have a user scp'ing only on a > FreeBSD machine and deny ssh access? > > I've got an sshd running and want one user only use scp but disallow ssh > access. I've tried to set the shell to /bin/false but then even scp > won't be accessible (does anybody know why??). > > This machine does not have an ftpd installed (and I don't want to). > > Is there a way to restrict an ssh user to scp only? > > Thx, > > Volker