Massimiliano Torromeo's questions

I want to allow ssh access to a specific account, but if I connect using a specific puclic key, I should be dropped to a full shell, otherwise to a restricted one.

Example:

I connect with ssh to [email protected] using the public key ABCDEF (correctly set up in authorized_keys) and I get a /bin/zsh shell

If I connect to [email protected] with a password or another public key, I get a /bin/rsh shell

My idea was to create a custom intermediate shell (IE: /bin/mysh), check the key used and execute the correct shell from there, but I don't know how to check which key was used (or if it's possible at all).

env doesn't seem to contain anything useful.

Any ideas on how to do this or other possible solutions?

Thanks.

I know the question sounds provocative, but it really isn't. I'm lately finding MySQL limiting in a lot of areas and liking PostgreSQL more and more. It scales a lot better and it respects the SQL standards a lot more than MySQL.

I'm still new to the PostgreSQL world though and since I'm willing to move away from MySQL for all my future projects, what I want to know is: is there any particular feature of MySQL that it is done better (as in more high-performing or more user friendly, etc..) than in PostgreSQL?

I'm wondering what I'm going to miss from MySQL. I already found that the AUTO_INCREMENT fields in MySQL are more handy than SEQUENCES in PostgreSQL and the deployment in Windows was problematic in the past (not a problem anymore. Never a problem for me).

What else?

I'm currently using IPFW on 3 dedicated firewall servers, and I would like to convert them to PF for some of its functionalities, but I need divert to work. Specifically I am teeing packets to a custom application for network analysis purposes.

Is it (or something similar) supported in PF?

I have a freebsd server (ipfw, dhcp, dns) with one LAN interface and 2 WAN interfaces (2 different ADSL lines).

The WAN interfaces (re0 and re1) are aggregated into one lagg0 failover (ifconfig_lagg0="laggproto failover laggport re0 laggport re1").

What I would like to use is routing traffic directed to some nets to re1, failing over to re0 when re1 link goes down, but still use re0 and failover to re1 by default.

Is it possible?

Thanks.

[UPDATE]

Ok, so bonding is not a possible solution (and now I see that it was obvious).

How can I automatically update the routing on the gateway when the link on one of the lines goes down? I don't care if I need to switch from ipfw to pf (I was planning the switch anyway).

Thanks again.