OK.
Thanks for all the advise.
I am using PUTR too, of course.
Unfortunately, the firewall of our company does not allow FTP....
Lucky me that I bought the RT-11 Freeware CD-ROM from Tim.
On it is the small FTP and Telnet package as well, in a .DSK and as
a directory with the seperate files in it. Saves some download time.
> BTW, one word of advice, follow the instructions to very
> carefully, you'll save yourself a lot of headaches!
So, I guess I will encounter the same pitfalls. That is okay, in
such a scenario you learn the most. Struggling with some problems
is half the fun, isn't it? Then there is always ClassicCmp ....
-Henk.
Hi all,
Two years ago I put up a ZIP file (lamp.zip) containing
scans of pages from a manual showing how to build logic
circuits using neon lamps. I just made the file available
for a short time.
Now someone has found the name of the file from the
classiccmp archive and has ask me for a copy of the file.
I can't find it on any of the computers I have up and
running, or on any of my back-up CDs.
Would someone that grabbed the file two years ago, please
send it to me or put it up so I can grab it. Thanks.
--Doug
=========================================
Doug Coward
@ home in Poulsbo, WA
=========================================
On Apr 19, 13:21, healyzh(a)aracnet.com wrote:
> > > I have a Solaris 2.6 Ultra-10 at work and I want to prevent users
>from logging into my machine. I dont want
> > > to run in single-user mode. Is there a way to disable rlogin or
telnet over to my machine?
> >
> > Edit /etc/inetd.conf and comment out the shell, login, exec, telnet and
ftp
> > lines. As a matter of fact, comment everything else out as well.
> >
> > Eric
>
> Comment everything out and the question becomes, is the box still usable?
>
> Also it may be desirable to leave either telnet or ssh running, but move
> them to a non-standard port. That way he can access his own system
> remotely.
Security by obscurity is no security at all. OK, in this case it may be
more a question of convenience, but if Ram has the access (ie, access to
the root account) to do all these things, he would be better to either do
as Gene suggested and "touch /etc/nologin" (or put some text in it: the
contents are printed by login before it closes the connection), or to do it
properly and run tcpwrappers, with suitably set up /etc/hosts.allow and
/etc/hosts.deny files -- then he can control who can connect, from where,
and using which protocols (telnet, rlogin, rsh/rcp, ftp, ssh, etc).
If you *are* thinking of security, remember that inetd only controls some
network services -- some, like SMTP, HTTP, SNMP and others, normally run as
daemons in their own right.
--
Pete Peter Turnbull
Network Manager
Dept. of Computer Science
University of York
On April 19, Alex Holden wrote:
> Does Solaris inetd automatically reread /etc/inetd.conf? If not, you'll
> also have to kill -HUP the inetd process (or reboot the machine).
Crap, I forgot to mention that. Here I was thinking I was being cool
by delivering a nice complete description of everything, and I go and
screw the pooch by forgetting the most important last step.
I think I'm gonna grab my cat and go back to bed.
-D.
Hi,
as promised here is my photo series on systematically disassembling
a VAX 6000-420. I do not envy you poor folks who thought simply
taking out the card cages and the cab kit would allow you to somehow
put this back together to a working machine. Has anyone ever actually
done this?
Anyway, here is my VAXian anatomy page:
http://aurora.regenstrief.org/VAX/anatomy
BTW: I (and a few friends) am still looking for advice on how exactly
to convert the power unit so as to hook a VAX 6420 on 110 V houshold
power. Either 110 V single phase or 240 V 2-phase would do. I have
done electronics in my youth, but I have no clue how to go about it
and don't want to go trial and error :-)
Any help is appreciated.
regards
-Gunther
On April 19, Ram Meenakshisundaram wrote:
> I have a Solaris 2.6 Ultra-10 at work and I want to prevent users
> from logging into my machine. I dont want to run in single-user
> mode. Is there a way to disable rlogin or telnet over to my
> machine?
Yes, it's easy. All network-based services like that usually have
their server-side components run by a supervisory program
("superserver") called "inetd". Inetd listens on all the ports that
services are registered for, and when a connection request comes in,
inetd accepts the connection, starts the required server binary, and
basically hands it the socket. From then on, that connection is
handled by the server binary for that particular service.
This whole operation is handled by a config file called
/etc/inetd.conf. It's got one line per service, and each line has
many fields that control different things. The first field is the
name of the service (telnet, ftp, etc). You can comment out services
in that file by inserting a "#" in the very beginning of the line in
question.
To achieve the results you want, I would comment out the following
lines:
telnet (handles incoming telnet connections)
ftp (handles incoming ftp connections)
login (handles incoming rlogin connections)
shell (handles incoming rsh and rcp connections)
I hope this helps.
-Dave McGuire
On April 19, Eric J. Korpela wrote:
> True. I guess I just assume everyone runs ssh now. :) I'd recommend against
> telent or rlogin regardless of what port you use. Just too dangerous to
> have plain text passwords traveling over ethernet, even if it never
> gets outside of the company firewall. You never can tell if that windows box
> next door has a packet sniffer.
Not everyone runs ssh nowadays. For networks of more than a handful
of machines, it just doesn't seem to scale well enough, as nice as it
is. For larger networks a central network authentication system like
Kerberos is much more suitable, in my opinion.
-Dave McGuire
On April 19, Bill Gunshannon wrote:
> maybe I'm just being dense, but wouldn't the easiest solution be to just
> not give others accounts on your box??
That approach assumes un-guessable passwords.
It's trivial to write a program that iterates through all possible
character combinations. Sure, it might take weeks, or even
months...but then they're in.
-Dave McGuire
Introducing a new concept on advanced garbage treatment process, and licensing patents
For details, please reference the web site:
http://zwj5382.3322.nethttp://zwj5382.163.net
The inventor would like to assign exclusive patent license to anyone who is interested in patented advanced garbage treatment process technology. For patent license, please contact the inventor via E-mail:
zwj88zww(a)371.net
Hi!
I have a DGone laptop in functional condition- two floppy drives,
better LCD screen, max memory, power supply, hard carrying case. Only thing
that doesn't work (as far as I know) is the battery pack. Also multiple
printers, ribbons, thermal paper, a spare screen, keyboard, maybe a floppy
and expansion port thingie, system boards, etc. I also have Wordstar that
runs on the DGone, a few boot (MSDOS) disks, and GWBasic. Free or cost of
shipping (Northboro, MA) if I get one interested party. If I have more than
one, it'll be an auction to see who wants it most. If I don't hear from
anyone, well, I'm afraid its dumpster time. Please email me-
mark.desmarais(a)avocent.com.
thanks
Markd