pam_ihosts(8) System Manager's Manual pam_ihosts(8) (NAME) pam_ihosts - PAM (SYNOPSIS) pam_ihosts.so [user=] [syslog] [allow-device=] [allow-mac=] [allow-ip=] [allow-region=] [region-files=] [script=] (DESCRIPTION) pam_ihosts IP . pam_ihosts.so <> (RIR) IP . pam_ihosts.so . IP "IHOSTS_ADDRESS" MAC "IHOSTS_MAC" "IHOSTS_REGION" . . pam_ihosts.so . MAC IP . (OPTIONS) PAM /etc/pam.d : user=[user patterns] fnmatch ( ) . "user=*" . <> root "user=!root" . conf-file=[path] pam_ihosts . PAM PAM user= . syslog syslog. script=[path] . "ALLOW/DENY" "User" "IP" "Mac Address" "Device" "Region". "Region" ":" "ripencc:GB". allow-ip=[ip] fnmatch IP . allow-hosts=[host] ( IP) . allow-dyndns=[host] ( ) ( <> ). allow-mac=[mac] fnmatch MAC . allow-dev=[dev] fnmatch . . allow-region=[region] fnmatch IP . ":" . "region-files" . << (REGION FILES)>> . region-files=[paths] IP. "mmap:" (mmap) ( << (MMAPPED FILES)>> ). << (REGION FILES)>> . blacklist=[paths] IP MAC ( ). ( IP) . "mmap:" (mmap) ( << (MMAPPED FILES)>> ). whitelist=[paths] IP MAC ( ). ( IP) . "mmap:" (mmap) ( << (MMAPPED FILES)>> ). dnsblacklist=[domains] DNS. "dnsblacklist=zen.spamhaus.org,bots.abuse.net" DNS zen.spamhaus.org bots.abuse.net . (DENIED) . DNS . dnswhitelist=[domains] DNS. "dnswhitelist=whitelist.spamhaus.org,mylist.local" DNS whitelist.spamhaus.org mylist.local . (ALLOWED) . DNS . (DYNDNS) "allow-host" IP . "allow-dyndns" . IP . DNS (Dynamic DNS) IP ( IP ISP) . <<>> ISP DNS IP <<>> IP IP . (REGION FILES) (RIR) . : http://ftp.lacnic.net/pub/stats/lacnic/delegated-lacnic-latest # Latin America http://ftp.ripe.net/ripe/stats/delegated-ripencc-latest # Europe, Russia, Middle East http://ftp.arin.net/pub/stats/arin/delegated-arin-extended- latest # North America http://ftp.afrinic.net/pub/stats/afrinic/delegated-afrinic- latest # Africa http://ftp.apnic.net/stats/apnic/delegated-apnic-latest # Asia Pacific (BLACKLISTS/WHITELISTS) / IP MAC . . . . pam_ihosts . "allow-ip=*" . (MMAPPED FILES) "mmap:" . pam_ihosts . pam_ihosts . . pam_ihosts . . (EXAMPLES) root 192.168.0.*: account required pam_ihosts.so user=root syslog allow-ip=192.168.0.* MAC : account required pam_ihosts.so user=* allow-mac=ff:c0:a8:e4:99:31,ff:c0:a8:f9:cc:01 root IP : account required pam_ihosts.so user=!root region-files=/etc/ip-lists/delegated-afrinic-latest,/etc/ip-lists/delegated-lacnic-latest,/etc/ip-lists/delegated-apnic-latest,/etc/ip-lists/delegated-ripencc-latest allow-region=ripencc:GB IP : account required pam_ihosts.so user=* region-files=/etc/ip-lists/delegated-afrinic-latest,/etc/ip-lists/delegated-lacnic-latest,/etc/ip-lists/delegated-apnic-latest,/etc/ip-lists/delegated-ripencc-latest allow-region=apnic:* apnic : account required pam_ihosts.so user=* region-files=/etc/ip-lists/delegated-apnic-latest allow-region=apnic:* IP mmap afrinic lacnic : account required pam_ihosts.so user=* region-files=mmap:/etc/ip-lists/delegated-afrinic-latest,mmap:/etc/ip-lists/delegated-lacnic-latest,/etc/ip-lists/delegated-apnic-latest,/etc/ip-lists/delegated-ripencc-latest allow-region=apnic:* (SEE ALSO) pam.conf(5), pam.d(5), pam(8) 2015/05/20 pam_ihosts(8)