"Events and Messages : Proactive" - Extreme login security using SMS audit
Event in zFTPServer: BeforeLoggedIn
Script in zFTPServer: C:\Scripts\SMSAudit.cmd %USERNAME% %IP%
Error message in zFTPServer: Access denied
Contents of file "C:\Scripts\SMSAudit.cmd":
@echo off
rem Setup variables
set USER=<sms username>
set PASS=<sms password>
rem Url-encode question to be sent "Allow user to login: %1 (%2)?"
set TEXT=Allow%%20user%%20to%%20login%%3A%%20%1%%20%%28%2%%29%%3F
set TO=555123456
set FROM=zFTPAudit
set PARAMS=acc=%USER%^^^&pass=%PASS%^^^&msg=%TEXT%^^^&to=%TO%^^^&from=%FROM%^^^&prio=3
rem Send question to administrator
wget --delete-after http://smsgateway/send.php?%PARAMS% >NUL
rem Wait for answer via SMS or timeout after two minutes
WaitForSMSOrTimeout.exe --timeout 120
rem Only allow login if no error level reported
if ERRORLEVEL 1 exit 1
rem All is OK, go ahead with login
exit 0
|