Maybe I'm not thinking straight but I put these entries in my users file:
## REJECT ATTEMPTS TO LOGIN AS ROOT THROUGH DIALINS #########################$
root Auth-Type = Reject
Proot Auth-Type = Reject, Prefix = "P"
root Auth-Type = Reject, Framed-Protocol = PPP
-- - Steve - Systems Manager - Community Internet Access, Inc. - Gallup and Grants, New Mexico - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message.