Deny remote login

Just like we do it for root user. I want to deny a user remote login using telnet. But he should be able to su into the account. I know 2 ways to do it.

1)Firstly set that particular user's profile to /bin/false

2)In the user profile the first command to get executed should be

stty 0

Is ther any other way to do so?

Thanks

Suresh

[376 byte] By [ramachandran_suresh] at [2007-11-26 6:50:01]