By default rules for access management are taken from config file /etc/security/access.conf if you don't specify another file.
If Linux PAM is compiled with audit support the module will report when it denies access based on origin (host or tty).
All module types (auth, account, password and session) are provided.
access.conf(5), pam.d(5), pam(7).
The logdaemon style login access control scheme was designed and implemented by Wietse Venema. The pam_access PAM module was developed by Alexei Nogin <email@example.com>. The IPv6 support and the network(address) / netmask feature was developed and provided by Mike Becher <firstname.lastname@example.org>.