Agh, magica. Those were the good old days. :)
What was that monster MIPS box you had that you terminated the serial tunnel on? Wasn't it the one that came in the same style as the VAX 6000?
-brian
On Dec 29, 2011, at 18:38, Johnny Billquist <bqt at softjar.se> wrote:
Fun story:
A number of years ago I had a russian guy who asked for a guest account on Magica (MIMs predecessor, a real PDP-11/70, which is still around).
A day or so later, the system had crashed, and I had received an email with an apology from the russian guy for crashing the system.
It turned out that he and some friends had a russian cloned RSX system from some old age, which they had done plenty of hacking and working on, and in the process had found some potential exploits. Curious as they were, they decided to check if those exploits were still around in the latest version of RSX, which they had not touched before. Since I had protected all the directories and source files from random access, they couldn't check the source code, but they could write programs, so they did.
And yes, the possible exploits and holes were still around, and thus Magica crashed. This was in V4.5, if I remember right. I thanked them for the information, rebooted the system and sent what they told be on towards Mentec. The russian promised to not do that again, and I just thought it was fun.
V4.6 fixed one or two of the problems, but a couple of them are still around.
So, once it a while, you actually do find someone who knows what they are doing, but such people are normally not evil.
I'm still looking for script kiddies trying to hack MIM. Once in a while I do get people who try to login repeatedly as root, falken, and other known Unix accounts. Poor kids... ;-)
Johnny
On 2011-12-29 14.17, Brian Hechinger wrote:
Or Solaris, or *BSD, or.....
If they can't run a script on linux or windows they can't hack in.
Yes, I have a very poor view of crackers these days. :-D
-brian
On 12/29/2011 4:24 AM, hvlems at zonnet.nl wrote:
MIM uses guest/guest and a script that asks for your name. Not secure
but then again what's there to steal? And I doubt whether hackers know
their way in any DEC OS ...
-----Original Message-----
From: "Steve Davidson"<jeep at scshome.net>
Sender: owner-hecnet at Update.UU.SE
Date: Wed, 28 Dec 2011 22:42:17
To:<hecnet at Update.UU.SE>
Reply-To: hecnet at Update.UU.SESubject: RE: [HECnet] Circuit costs -
Area 19 revised
I do not create any accounts unless asked by the node owner...
Only some machines have guest accounts and as far as I know we have no
standard. This site does not have guest accounts. I do create accounts
on request for some of the machines. Mostly PLUTO::, because it is the
only RSTS/E system on HECnet, but it is not up all of the time. With
the exception of PLUTO:: none of my machines offer anything that HECnet
users don't already have.
-Steve
-----Original Message-----
From: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] On
Behalf Of Brian Hechinger
Sent: Wednesday, December 28, 2011 10:09 PM
To: hecnet at Update.UU.SE
Subject: Re: [HECnet] Circuit costs - Area 19 revised
Ah, no guest accounts have been setup unless Steve did it so I'm
assuming he hasn't. I'll create some guest accounts tomorrow.
What's the standard HECnet guest?
-brian
On Dec 28, 2011, at 19:43, hvlems at zonnet.nl wrote:
Hi Brian, It may have been an example of the NML issue discussed here
a couple of days ago. Anyway set host rifter worked fine. I tried
guest/guest and hecnet/guiest but that didn't work. Well, I quit for the
day, it's late out here.
Hans
------Origineel bericht------
Van: Brian Hechinger
Afzender: owner-hecnet at Update.UU.SE
Aan: hecnet at Update.UU.SE
Beantwoorden: hecnet at Update.UU.SE
Onderwerp: Re: [HECnet] Circuit costs - Area 19 revised
Verzonden: 29 december 2011 01:07
On 12/28/2011 6:44 PM, H Vlems wrote:
Brian, is RIFTER a phase V node? NCP set exec node RIFTER doesn't
work, even
when I jump to SG1 first.
No, it's a Phase IV node.
-brian
On 2011-12-29 17.37, Steve Davidson wrote:
[...]
Multinet circuits are in the form of "TCP-x-y". Both "x" and "y" are
assignable and default to zero (0). I have been using "x" to denote
physical circuit and "y" to denote area end-point. This way I no longer
have to remember (or guess) what the other end is. SG1:: only has one
(1) NIC so in my case "x" is always zero (0).
DECnet LAN circuits are in the form of xxA-n, where "xx" is the
controller type, and "n" is the physical unit of that type (starting at
zero (0)).
And multidrop connections might be in the form xxx-yy.z if I remember right.
xxx is normally related to device type. yy in many cases are the number of the controller, and z the line on that controller.
And as usual, I might be remembering details wrong. :-)
Johnny
-Steve
-----Original Message-----
From: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] On
Behalf Of Brian Hechinger
Sent: Thursday, December 29, 2011 11:25 AM
To: hecnet at Update.UU.SE
Subject: Re: [HECnet] DCL Help needed
On 12/29/2011 11:17 AM, Steve Davidson wrote:
Steal and steal often is my motto :-)
Take whatever you need! The new version will be better commented and
not require the reboot. I will place a copy of the old version of the
data file (it matches this version) in the same directory.
I'm assuming .eqs. is rather limited (say the way = is in bash)?
Is there any sort of regex style matching available?
Short of that, is it fair to say that all circuit names in the output of
show known circuits will always be in the form of XXX-N for non-multinet
tunnels?
-brian
Fun story:
A number of years ago I had a russian guy who asked for a guest account on Magica (MIMs predecessor, a real PDP-11/70, which is still around).
A day or so later, the system had crashed, and I had received an email with an apology from the russian guy for crashing the system.
It turned out that he and some friends had a russian cloned RSX system from some old age, which they had done plenty of hacking and working on, and in the process had found some potential exploits. Curious as they were, they decided to check if those exploits were still around in the latest version of RSX, which they had not touched before. Since I had protected all the directories and source files from random access, they couldn't check the source code, but they could write programs, so they did.
And yes, the possible exploits and holes were still around, and thus Magica crashed. This was in V4.5, if I remember right. I thanked them for the information, rebooted the system and sent what they told be on towards Mentec. The russian promised to not do that again, and I just thought it was fun.
V4.6 fixed one or two of the problems, but a couple of them are still around.
So, once it a while, you actually do find someone who knows what they are doing, but such people are normally not evil.
I'm still looking for script kiddies trying to hack MIM. Once in a while I do get people who try to login repeatedly as root, falken, and other known Unix accounts. Poor kids... ;-)
Johnny
On 2011-12-29 14.17, Brian Hechinger wrote:
Or Solaris, or *BSD, or.....
If they can't run a script on linux or windows they can't hack in.
Yes, I have a very poor view of crackers these days. :-D
-brian
On 12/29/2011 4:24 AM, hvlems at zonnet.nl wrote:
MIM uses guest/guest and a script that asks for your name. Not secure
but then again what's there to steal? And I doubt whether hackers know
their way in any DEC OS ...
-----Original Message-----
From: "Steve Davidson"<jeep at scshome.net>
Sender: owner-hecnet at Update.UU.SE
Date: Wed, 28 Dec 2011 22:42:17
To:<hecnet at Update.UU.SE>
Reply-To: hecnet at Update.UU.SESubject: RE: [HECnet] Circuit costs -
Area 19 revised
I do not create any accounts unless asked by the node owner...
Only some machines have guest accounts and as far as I know we have no
standard. This site does not have guest accounts. I do create accounts
on request for some of the machines. Mostly PLUTO::, because it is the
only RSTS/E system on HECnet, but it is not up all of the time. With
the exception of PLUTO:: none of my machines offer anything that HECnet
users don't already have.
-Steve
-----Original Message-----
From: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] On
Behalf Of Brian Hechinger
Sent: Wednesday, December 28, 2011 10:09 PM
To: hecnet at Update.UU.SE
Subject: Re: [HECnet] Circuit costs - Area 19 revised
Ah, no guest accounts have been setup unless Steve did it so I'm
assuming he hasn't. I'll create some guest accounts tomorrow.
What's the standard HECnet guest?
-brian
On Dec 28, 2011, at 19:43, hvlems at zonnet.nl wrote:
Hi Brian, It may have been an example of the NML issue discussed here
a couple of days ago. Anyway set host rifter worked fine. I tried
guest/guest and hecnet/guiest but that didn't work. Well, I quit for the
day, it's late out here.
Hans
------Origineel bericht------
Van: Brian Hechinger
Afzender: owner-hecnet at Update.UU.SE
Aan: hecnet at Update.UU.SE
Beantwoorden: hecnet at Update.UU.SE
Onderwerp: Re: [HECnet] Circuit costs - Area 19 revised
Verzonden: 29 december 2011 01:07
On 12/28/2011 6:44 PM, H Vlems wrote:
Brian, is RIFTER a phase V node? NCP set exec node RIFTER doesn't
work, even
when I jump to SG1 first.
No, it's a Phase IV node.
-brian
Just FYI: On MIM:: there is GUEST/GUEST
Johnny
On 2011-12-29 08.55, hvlems at zonnet.nl wrote:
I'm not sure there is a standard. On some machines I use hecnet / guest
------Origineel bericht------
Van: Brian Hechinger
Afzender: owner-hecnet at Update.UU.SE
Aan: hecnet at Update.UU.SE
Beantwoorden: hecnet at Update.UU.SE
Onderwerp: Re: [HECnet] Circuit costs - Area 19 revised
Verzonden: 29 december 2011 04:08
Ah, no guest accounts have been setup unless Steve did it so I'm assuming he hasn't. I'll create some guest accounts tomorrow.
What's the standard HECnet guest?
-brian
On Dec 28, 2011, at 19:43, hvlems at zonnet.nl wrote:
Hi Brian, It may have been an example of the NML issue discussed here a couple of days ago. Anyway set host rifter worked fine. I tried guest/guest and hecnet/guiest but that didn't work. Well, I quit for the day, it's late out here.
Hans
------Origineel bericht------
Van: Brian Hechinger
Afzender: owner-hecnet at Update.UU.SE
Aan: hecnet at Update.UU.SE
Beantwoorden: hecnet at Update.UU.SE
Onderwerp: Re: [HECnet] Circuit costs - Area 19 revised
Verzonden: 29 december 2011 01:07
On 12/28/2011 6:44 PM, H Vlems wrote:
Brian, is RIFTER a phase V node? NCP set exec node RIFTER doesn't work, even
when I jump to SG1 first.
No, it's a Phase IV node.
-brian
On 2011-12-27 18.21, Peter Lothberg wrote:
(if there are more than one area router on the same LAN it will
use the one with the highest node number, no metrics...)
Nah.
It will use the one with the highest number as the arbitor if they have the same router priority, unless I remember wrong. First of all it will use the one with the highest priority value.
But I might remember things wrong, as usual... :-)
Johnny
On 2011-12-27 16.36, Steve Davidson wrote:
Hey folks...
LAN costs are 4 by default (for VMS nodes anyway). If we make use of
that then all we have to touch are the Multinet circuits. I set my
Multinet circuits to 3 because they are much faster and I would prefer
to use the most "efficient" path possible. You will loose the ability
to use SET HOST/LAT, and MOM/MOP, and LAD/LAST, but that should me
minor...
Huh? I didn't follow that last part. Why would you loose the ability to use MOP and LAT when you change circuit costs for DECnet?
Johnny
-Steve
-----Original Message-----
From: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] On
Behalf Of Bob Armstrong
Sent: Tuesday, December 27, 2011 10:00 AM
To: hecnet at Update.UU.SE
Subject: [HECnet] Circuit costs
Peter Lothberg wrote:
Here is a suggestion....
Set all Multinet links to cost 5 in both ends
Set all bridged Ethernet interfaces to 10
Set all Multinet link nodes Level2 Area Routers
Well, I like it. I'll do it if you do it...
Actually that's a problem with DECnet - everybody _has_ to do their
own;
circuit costs are individually defined per node.
Bob
On 2011-12-27 15.59, Bob Armstrong wrote:
Peter Lothberg wrote:
Here is a suggestion....
Set all Multinet links to cost 5 in both ends
Set all bridged Ethernet interfaces to 10
Set all Multinet link nodes Level2 Area Routers
Well, I like it. I'll do it if you do it...
Actually that's a problem with DECnet - everybody _has_ to do their own;
circuit costs are individually defined per node.
I think it makes sense as well, as ethernet segments can't really separate costs for different next hops.
Might as well make them expensive so that ptp links are preferred when possible.
Johnny
On 2011-12-27 12.05, hvlems at zonnet.nl wrote:
Isn't the problem similar to what happens if there would have been two active bridges between two ethernet segments?
Sorry for being offline a couple of days...
Anyway, the answer to that one is no (maybe someone else already replied, I have over 200 unread after the spam filtering have run over my inbox).
If you have two active bridges between two ethernet segments one of two things happen.
1) The bridges realize this, and shut one of them down.
2) The bridges don't realize this, and starts sending packets around in a never ending loop, causing havoc.
My bridge program falls in category 2. Any sensible ethernet switch you might have at home hopefully falls into category 1.
The normal way of implementing category 1 is by having the switch implement the spanning tree protocol to detect possible loops.
Johnny
------Origineel bericht------
Van: Peter Lothberg
Afzender: owner-hecnet at Update.UU.SE
Aan: hecnet at Update.UU.SE
Cc: hecnet at Update.UU.SE
Beantwoorden: hecnet at Update.UU.SE
Onderwerp: Re: [HECnet] ROOSTA routing problem
Verzonden: 27 december 2011 18:43
Hmmm.. LEGATO can't talk to ROOSTA ("remote node not currently reachable")
even though there's a direct Multinet link to ROOSTA (and yes, the link is
UP and working).
I think the problem is that ROOSTA is in area 6, and the area router for 6
is STAR69. Trouble is, STAR69 doesn't have a path to ROOSTA and doesn't
know how to send it packets.
(It doesn't help that STAR69 still thinks that ROOSTA is 3.34 - it moved
to 6.134 a while ago - but I don't think that's causing the problem.)
Multinet links metric 5
Bridged ethernet metric 10
Set all multinet-link nodes Level2-Area-Routers
--P
.eqs. compares two strings for an exact match. It is case sensitive and thus
surprisingly strict for an OS that seems to do uppercase only...
What is regex??
Circuit names for ethernet device are DDD-N
DDCMP (serial lines), CI and DSSI devices are DD-N-M
Where D is a letter and N and M are digits.
Hans
-----Oorspronkelijk bericht-----
Van: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] Namens
Brian Hechinger
Verzonden: donderdag, december 2011 17:25
Aan: hecnet at Update.UU.SE
Onderwerp: Re: [HECnet] DCL Help needed
On 12/29/2011 11:17 AM, Steve Davidson wrote:
Steal and steal often is my motto :-)
Take whatever you need! The new version will be better commented and
not require the reboot. I will place a copy of the old version of the
data file (it matches this version) in the same directory.
I'm assuming .eqs. is rather limited (say the way = is in bash)?
Is there any sort of regex style matching available?
Short of that, is it fair to say that all circuit names in the output of
show known circuits will always be in the form of XXX-N for non-multinet
tunnels?
-brian
What bothers me are the multiple paths between locations.
------Origineel bericht------
Van: Steve Davidson
Afzender: owner-hecnet at Update.UU.SE
Aan: hecnet at Update.UU.SE
Beantwoorden: hecnet at Update.UU.SE
Onderwerp: RE: [HECnet] Re: Topology 28-Dec-2011
Verzonden: 29 december 2011 22:35
We definitely have to review the cost structure at the end of this
mapping exercise!
-Steve
-----Original Message-----
From: owner-hecnet at Update.UU.SE [mailto:owner-hecnet at Update.UU.SE] On
Behalf Of Rok Vidmar
Sent: Thursday, December 29, 2011 3:30 PM
To: hecnet at update.uu.se
Subject: Re: [HECnet] Re: Topology 28-Dec-2011
Are you looking at the links dynamically or based on what was
submitted
by each of us?
Dynamically, with ncp show adjacent nodes.
--
Regards, Rok
