- HECnet - lists @ Update

What happens when the host uses a dynamically assigned IP address?

by b4＠gewt.net

On Wed, 25 Sep 2013, Gregg Levine wrote: Hello! Still thinking about working on how to bring up a system that's eligible for participation within our group. The only stumbling block isn't the OS or the emulated system. In fact it happens to be the fact that my Internet connection is managed via a DSL device who is assigned an IP address via PPPoE services. Does any of our members also have that problem? I actually asked the service provider what was involved with ordering service for a static one several years earlier. I have the same problem. I solved it with a good router + Brian's scripts + a UPS. Problem then, was that the copper was too old in my part of the country. I imagine that FIOS (Fiber-optic based service from the phone company) is the reason why the copper isn't be upgraded. And since my cable company can be all thumbs when performing service I turned down their offers...... ----- Gregg C Levine gregg.drwho8 at gmail.com "This signature fought the Time Wars, time and again." -- Cory Smelosky http://gewt.net Personal stuff http://gimme-sympathy.org Projects

11 years, 10 months

1
0
0 0

What happens when the host uses a dynamically assigned IP address?

by gregg.drwho8＠gmail.com

Hello! Still thinking about working on how to bring up a system that's eligible for participation within our group. The only stumbling block isn't the OS or the emulated system. In fact it happens to be the fact that my Internet connection is managed via a DSL device who is assigned an IP address via PPPoE services. Does any of our members also have that problem? I actually asked the service provider what was involved with ordering service for a static one several years earlier. Problem then, was that the copper was too old in my part of the country. I imagine that FIOS (Fiber-optic based service from the phone company) is the reason why the copper isn't be upgraded. And since my cable company can be all thumbs when performing service I turned down their offers...... ----- Gregg C Levine gregg.drwho8 at gmail.com "This signature fought the Time Wars, time and again."

11 years, 10 months

1
0
0 0

Public access?

by b4＠gewt.net

On Wed, 25 Sep 2013, Sampsa Laine wrote: Of course I am more worried about the non-DEC stuff which could be 'pwned' using a VMS or Ultrix system as a beachhead. That's my concern as well, I really don't want to put my HECnet stuff on a separate VLAN, right now it's on my internal network with all my other stuff. Is it posible to deny an user access to the IP stack (either UCX or multinet)? If so, I would setup my guest accounts to 'decnet only' access. I'd like to do this as well - if the user has no access to IP, I'd be happier to let pretty much anyone in. I'll happily give anyone access to TOPS-10. It doesn't have a TCP/IP stack. ;) sampsa -- Cory Smelosky http://gewt.net Personal stuff http://gimme-sympathy.org Projects

11 years, 10 months

1
0
0 0

Public access?

by sampsa＠mac.com

On 25 Sep 2013, at 16:47, Mark Wickens wrote: I'd seriously consider picking Steven Hoffman's brains on this before opening a system up to the world. I had thought about trying to get a VMS box collocated for a 'UK deathrow' experience but Hoff seriously put me off the idea ;) And I think you have the same 'seat of your pants' mentality that I do, which probably isn't a win when you're looking to manage a public facing system (or at least a public facing system that the public know about!) Mark. This is why I manually verify any new user applications and audit what they do for a while. I don't get many hacking attempts or anything on the boxes that I've got telnet open on, it's a different matter once they have an account of course. I could maybe move the HILANT cluster into its own VLAN, so IP access from there wouldn't be a big deal, could even firewall most outgoing traffic. sampsa

11 years, 10 months

1
0
0 0

Public access?

by e.olofsen＠xs4all.nl

Hi Sampsa, I was considering updating the HECNET-INFO in INFO.TXT with an ACCESS field. At present it contains: REGISTER,NOGUEST,NOIP The latter means it is not connected to the internet. With the OS and hardware information, this may be useful for people to see how they can get access to an interesting machine. I hadn't played with FAL for many months, so I discovered the password settings for the DECNET accounts and objects were inconsistent, probably resulting in the security alarms I had mailed you about some time ago (sorry)! Erik On Wed, Sep 25, 2013 at 11:48:39AM +0200, Sampsa Laine wrote: Of course I am more worried about the non-DEC stuff which could be 'pwned' using a VMS or Ultrix system as a beachhead. That's my concern as well, I really don't want to put my HECnet stuff on a separate VLAN, right now it's on my internal network with all my other stuff. Is it posible to deny an user access to the IP stack (either UCX or multinet)? If so, I would setup my guest accounts to 'decnet only' access. I'd like to do this as well - if the user has no access to IP, I'd be happier to let pretty much anyone in. sampsa

11 years, 10 months

1
0
0 0

Public access?

by mark＠wickensonline.co.uk

On 25/09/2013 01:54, Sampsa Laine wrote: I'm always happy to take more users onto CHIMPY and the HILANT clusters - you think I should let people in comp.os.vms know about these? Does anybody mind 'outsiders' getting access to HECnet? I don't mind. Most will probably not explore the fact that there is a big DECnet behind the machines. It is not that we are preventing people today either. It's just that there have never been much fuss about HECnet. However, I can understand if some people feel worried about traffic and issues. If so, let us know, and we'll try to think of what to do. This is why I manually vet the account requests - if the email address or name seem totally bullshit, I just ignore the request. I get maybe 2-3 new users per week on each system..I personally don't want to let the Deathrow guys behind my firewall :) sampsa Sampsa I'd seriously consider picking Steven Hoffman's brains on this before opening a system up to the world. I had thought about trying to get a VMS box collocated for a 'UK deathrow' experience but Hoff seriously put me off the idea ;) And I think you have the same 'seat of your pants' mentality that I do, which probably isn't a win when you're looking to manage a public facing system (or at least a public facing system that the public know about!) Mark. -- http://www.wickensonline.co.uk http://hecnet.eu http://declegacy.org.uk http://retrochallenge.net https://twitter.com/#!/%40urbancamo

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by sampsa＠mac.com

On 25 Sep 2013, at 16:45, Mark Wickens wrote: Quite possibly. But then I've been asleep since then... Maybe you just forgot to close the session sampsa <sampsa at mac.com> mobile +358 40 7208932

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by mark＠wickensonline.co.uk

On 25/09/2013 15:43, Sampsa Laine wrote: Did you telnet into CHIMPY last night? That would solve the mystery.. sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 16:42, Mark Wickens wrote: On 25/09/2013 15:30, Sampsa Laine wrote: Nope, just saw that the guy was logged into the launch pad from a UK BT ISP address for 7 hours. Maybe someone just forgot to close a window or something. I should probably implement logging for LAUNCH at some point. sampsa <sampsa at mac.com> mobile +358 40 7208932 As with most of these things, it's probably safe to assume that I am the root cause ;) Mark. -- http://www.wickensonline.co.uk http://hecnet.eu http://declegacy.org.uk http://retrochallenge.net https://twitter.com/#!/%40urbancamo Quite possibly. But then I've been asleep since then... -- http://www.wickensonline.co.uk http://hecnet.eu http://declegacy.org.uk http://retrochallenge.net https://twitter.com/#!/%40urbancamo

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by gregg.drwho8＠gmail.com

Hello! Okay, since under an earlier agreement I am not allowed to blame something else. ----- Gregg C Levine gregg.drwho8 at gmail.com "This signature fought the Time Wars, time and again." On Wed, Sep 25, 2013 at 10:42 AM, Mark Wickens wrote: On 25/09/2013 15:30, Sampsa Laine wrote: Nope, just saw that the guy was logged into the launch pad from a UK BT ISP address for 7 hours. Maybe someone just forgot to close a window or something. I should probably implement logging for LAUNCH at some point. sampsa <sampsa at mac.com> mobile +358 40 7208932 As with most of these things, it's probably safe to assume that I am the root cause ;) Mark. -- http://www.wickensonline.co.uk http://hecnet.eu http://declegacy.org.uk http://retrochallenge.net https://twitter.com/#!/%40urbancamo

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by sampsa＠mac.com

Did you telnet into CHIMPY last night? That would solve the mystery.. sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 16:42, Mark Wickens wrote: On 25/09/2013 15:30, Sampsa Laine wrote: Nope, just saw that the guy was logged into the launch pad from a UK BT ISP address for 7 hours. Maybe someone just forgot to close a window or something. I should probably implement logging for LAUNCH at some point. sampsa <sampsa at mac.com> mobile +358 40 7208932 As with most of these things, it's probably safe to assume that I am the root cause ;) Mark. -- http://www.wickensonline.co.uk http://hecnet.eu http://declegacy.org.uk http://retrochallenge.net https://twitter.com/#!/%40urbancamo

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by mark＠wickensonline.co.uk

On 25/09/2013 15:30, Sampsa Laine wrote: Nope, just saw that the guy was logged into the launch pad from a UK BT ISP address for 7 hours. Maybe someone just forgot to close a window or something. I should probably implement logging for LAUNCH at some point. sampsa <sampsa at mac.com> mobile +358 40 7208932 As with most of these things, it's probably safe to assume that I am the root cause ;) Mark. -- http://www.wickensonline.co.uk http://hecnet.eu http://declegacy.org.uk http://retrochallenge.net https://twitter.com/#!/%40urbancamo

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by sampsa＠mac.com

Nope, just saw that the guy was logged into the launch pad from a UK BT ISP address for 7 hours. Maybe someone just forgot to close a window or something. I should probably implement logging for LAUNCH at some point. sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 16:24, Gregg Levine <gregg.drwho8 at gmail.com> wrote: Hello! I can tell you very definitely it wasn't me. Do your logs show any more information while your favorite simian as system was signed into? ----- Gregg C Levine gregg.drwho8 at gmail.com "This signature fought the Time Wars, time and again." On Wed, Sep 25, 2013 at 6:01 AM, Sampsa Laine <sampsa at mac.com> wrote: Did any of you guys get a lot of logins from CHIMPY yesterday? Looks like somebody was signed into the LAUNCH account for 7+ hours.. 24-SEP-2013 18:53:47.95 LOGIN REMOTE CHIMPY LAUNCH 0003273A Host: host86-138-13-111.range 25-SEP-2013 02:37:41.49 LOGOUT REMOTE CHIMPY LAUNCH 0003273A Host: host86-138-13-111.range sampsa <sampsa at mac.com> mobile +358 40 7208932

11 years, 10 months

1
0
0 0

Public access?

by wonko＠4amlunch.net

On Wed, Sep 25, 2013 at 11:48:39AM +0200, Sampsa Laine wrote: Of course I am more worried about the non-DEC stuff which could be 'pwned' using a VMS or Ultrix system as a beachhead. That's my concern as well, I really don't want to put my HECnet stuff on a separate VLAN, right now it's on my internal network with all my other stuff. You don't? SLACKER! :) Is it posible to deny an user access to the IP stack (either UCX or multinet)? If so, I would setup my guest accounts to 'decnet only' access. I'd like to do this as well - if the user has no access to IP, I'd be happier to let pretty much anyone in. I know you can do it with DECnet, but I don't know about IP. That would be nifty if you could. -brian

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by gregg.drwho8＠gmail.com

Hello! I can tell you very definitely it wasn't me. Do your logs show any more information while your favorite simian as system was signed into? ----- Gregg C Levine gregg.drwho8 at gmail.com "This signature fought the Time Wars, time and again." On Wed, Sep 25, 2013 at 6:01 AM, Sampsa Laine <sampsa at mac.com> wrote: Did any of you guys get a lot of logins from CHIMPY yesterday? Looks like somebody was signed into the LAUNCH account for 7+ hours.. 24-SEP-2013 18:53:47.95 LOGIN REMOTE CHIMPY LAUNCH 0003273A Host: host86-138-13-111.range 25-SEP-2013 02:37:41.49 LOGOUT REMOTE CHIMPY LAUNCH 0003273A Host: host86-138-13-111.range sampsa <sampsa at mac.com> mobile +358 40 7208932

11 years, 10 months

1
0
0 0

Downtime

by sampsa＠mac.com

Yup, it's working now. sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 14:52, Johnny Billquist <bqt at softjar.se> wrote: On 2013-09-25 14:49, Sampsa Laine wrote: My bridge link isn't working.. I'm kicking on it in a moment. Johnny sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 14:42, Pontus Pihlgren <pontus at Update.UU.SE> wrote: Hi As you may or may not have noticed, we had a power outage so MIM and DECnet bridge went down for a while. Everything _should_ be back to normal now or soon. /P

11 years, 10 months

1
0
0 0

Cisco Config Tool

by wonko＠4amlunch.net

Is back up. :) -brian

11 years, 10 months

1
0
0 0

Downtime

by bqt＠softjar.se

On 2013-09-25 14:49, Sampsa Laine wrote: My bridge link isn't working.. I'm kicking on it in a moment. Johnny sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 14:42, Pontus Pihlgren <pontus at Update.UU.SE> wrote: Hi As you may or may not have noticed, we had a power outage so MIM and DECnet bridge went down for a while. Everything _should_ be back to normal now or soon. /P

11 years, 10 months

1
0
0 0

Downtime

by sampsa＠mac.com

My bridge link isn't working.. sampsa <sampsa at mac.com> mobile +358 40 7208932 On 25 Sep 2013, at 14:42, Pontus Pihlgren <pontus at Update.UU.SE> wrote: Hi As you may or may not have noticed, we had a power outage so MIM and DECnet bridge went down for a while. Everything _should_ be back to normal now or soon. /P

11 years, 10 months

1
0
0 0

Downtime

by pontus＠Update.UU.SE

Hi As you may or may not have noticed, we had a power outage so MIM and DECnet bridge went down for a while. Everything _should_ be back to normal now or soon. /P

11 years, 10 months

1
0
0 0

CHIMPT launchpad..

by sampsa＠mac.com

Did any of you guys get a lot of logins from CHIMPY yesterday? Looks like somebody was signed into the LAUNCH account for 7+ hours.. 24-SEP-2013 18:53:47.95 LOGIN REMOTE CHIMPY LAUNCH 0003273A Host: host86-138-13-111.range 25-SEP-2013 02:37:41.49 LOGOUT REMOTE CHIMPY LAUNCH 0003273A Host: host86-138-13-111.range sampsa <sampsa at mac.com> mobile +358 40 7208932

11 years, 10 months

1
0
0 0

Public access?

by sampsa＠mac.com

Of course I am more worried about the non-DEC stuff which could be 'pwned' using a VMS or Ultrix system as a beachhead. That's my concern as well, I really don't want to put my HECnet stuff on a separate VLAN, right now it's on my internal network with all my other stuff. Is it posible to deny an user access to the IP stack (either UCX or multinet)? If so, I would setup my guest accounts to 'decnet only' access. I'd like to do this as well - if the user has no access to IP, I'd be happier to let pretty much anyone in. sampsa

11 years, 10 months

1
0
0 0

Public access?

by jg＠jordi.guillaumes.name

El 25/09/2013, a les 2:29, Sampsa Laine <sampsa at mac.com> va escriure: On 25 Sep 2013, at 02:25, Cory Smelosky <b4 at gewt.net> wrote: On Wed, 25 Sep 2013, Sampsa Laine wrote: Since it seems the general public are having a hard time keeping such resources available, and it would seem that there are some here who are pretty good at it (or so I'd like to believe), maybe getting more users and usage could be a cool thing. But it might be a negative thing as well, so I'm not going to pursue this anymore right now. Johnny I'm always happy to take more users onto CHIMPY and the HILANT clusters - you think I should let people in comp.os.vms know about these? Does anybody mind 'outsiders' getting access to HECnet? It depends on the "outsider". If it's the cool dudes that want to learn, more power to 'em. I'll offer up resources. But if it's the malicious ones...bleh. This is what I'm concerned about, I don't want a full-scale migration of hackers and black hats from Deathrow suddenly on my systems or on HECnet. We run a pretty open shop since there's a level of trust between the participants... This. I have implemented just basic security at my network and to be honest I feel extremely lazy at the thought of hardening it. Of course I am more worried about the non-DEC stuff which could be 'pwned' using a VMS or Ultrix system as a beachhead. Is it posible to deny an user access to the IP stack (either UCX or multinet)? If so, I would setup my guest accounts to 'decnet only' access. sampsa

11 years, 10 months

1
0
0 0

Public access?

by sampsa＠mac.com

I'm always happy to take more users onto CHIMPY and the HILANT clusters - you think I should let people in comp.os.vms know about these? Does anybody mind 'outsiders' getting access to HECnet? I don't mind. Most will probably not explore the fact that there is a big DECnet behind the machines. It is not that we are preventing people today either. It's just that there have never been much fuss about HECnet. However, I can understand if some people feel worried about traffic and issues. If so, let us know, and we'll try to think of what to do. This is why I manually vet the account requests - if the email address or name seem totally bullshit, I just ignore the request. I get maybe 2-3 new users per week on each system..I personally don't want to let the Deathrow guys behind my firewall :) sampsa

11 years, 10 months

1
0
0 0

Public access?

by bqt＠softjar.se

On 2013-09-25 02:20, Sampsa Laine wrote: Since it seems the general public are having a hard time keeping such resources available, and it would seem that there are some here who are pretty good at it (or so I'd like to believe), maybe getting more users and usage could be a cool thing. But it might be a negative thing as well, so I'm not going to pursue this anymore right now. Johnny I'm always happy to take more users onto CHIMPY and the HILANT clusters - you think I should let people in comp.os.vms know about these? Does anybody mind 'outsiders' getting access to HECnet? I don't mind. Most will probably not explore the fact that there is a big DECnet behind the machines. It is not that we are preventing people today either. It's just that there have never been much fuss about HECnet. However, I can understand if some people feel worried about traffic and issues. If so, let us know, and we'll try to think of what to do. Johnny -- Johnny Billquist || "I'm on a bus || on a psychedelic trip email: bqt at softjar.se || Reading murder books pdp is alive! || tryin' to stay hip" - B. Idol

11 years, 10 months

1
0
0 0

Public access?

by sampsa＠mac.com

On 25 Sep 2013, at 02:25, Cory Smelosky <b4 at gewt.net> wrote: On Wed, 25 Sep 2013, Sampsa Laine wrote: Since it seems the general public are having a hard time keeping such resources available, and it would seem that there are some here who are pretty good at it (or so I'd like to believe), maybe getting more users and usage could be a cool thing. But it might be a negative thing as well, so I'm not going to pursue this anymore right now. Johnny I'm always happy to take more users onto CHIMPY and the HILANT clusters - you think I should let people in comp.os.vms know about these? Does anybody mind 'outsiders' getting access to HECnet? It depends on the "outsider". If it's the cool dudes that want to learn, more power to 'em. I'll offer up resources. But if it's the malicious ones...bleh. This is what I'm concerned about, I don't want a full-scale migration of hackers and black hats from Deathrow suddenly on my systems or on HECnet. We run a pretty open shop since there's a level of trust between the participants... sampsa

11 years, 10 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

HECnet