Also sprach Guillem Jover: > Use pam_access. > > in /etc/security/access.conf > > -:localnetuser1 localnetuser2:ALL EXCEPT LOCAL .localdomain > > in /etc/pam.d/ssh after "account requiered pam_unix.so" > > account requiered pam_access.so > > hope that helps Thanks a bunch to you Guillem. And to all the rest of you who said it couldn't be done :) -- You are a fluke of the universe; you have no right to be here.