On 2010-10-17 03:34, Johnny Billquist wrote:
Hi. As a few people are sharing LAT connections now as well, I thought
I'd make a suggestion on how to make this a bit more manageable.
If people have questions on LAT, how to set up DECservers, or something
else, you can as usual just mail me.
First of all, please note that LAT is not a safe protocol. Everything
goes in clear text, and malicious people can easily snoop your sessions.
My thoughts right now are in the area of services offered. When I list
services I notice that some machine consoles are available, as well as
some general machine logins.
The console services are nice to have (I also have a few of those),
however, they are not useful for the general public, and the hope is
that people who don't have anything to do with them don't connect to
them. But they do clutter up the list of available services anyhow.
What I'd like to propose is that for services that aren't of general use
should switch to another group. The default group is group #0, and that
group is nice to continue to use for generally available systems that
people might want to log in to.
I've been using group 1 for consoles for now, and I'd suggest that
others do that too. Or perhaps pick some other group if you want to keep
your machines separate. Notice that this does not really add anything
from a security point of view, since people can change their own port to
see services in any group if they really want to.
But if people set up their port to by default only be in group 0, and we
place consoles in group 1, they will not show up in the general case,
and you'd have to explicitly turn on group 1 when you want to play with
consoles (or if you want it on by default, feel free, but it will look
nicer to some atleast).
The same goes if you have printers, for instance, as services. Place
them also in another group. Preferably in yet another group, but atleast
not in group 0. And modems as well, if you have those.
So a suggested division of groups would be as follows:
0 General systems where people might log in.
1 Consoles
2 Modems
3 Printers
If you have all of that on the same DECserver you cannot be picky,
however, since you can only specify one group for all services offered.
Use the lowest group number for which you have a matching service in
that case.
Note that the group numbers only affect which services are visible to
users connected to a DECserver. It does not affect reverse LAT
connections, which will find the right service no matter which group it
is in.
So this is mostly just to make the list of services more convenient when
you look as an interactive user on a DECserver.
Finally a short suggestion for those of you who have consoles as
services. If you haven't found it, or set it up, I'd also suggest you
place a password on those services, which can limit the possibility of
others to wreak havoc on your machines... Just a suggestion.
It will still not prevent others from potentially DoS your console port.
I just had another idea as well.
Would people think it would be an interesting idea to have group numbers for machines differentiate depending on OS? So that people could see what VMS systems there are to connect to without seeing other systems?
Or maybe it would be more meaningful if we use group 0 for systems where guest access is available, and then people use their own groups for "local" systems?
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Hi. As a few people are sharing LAT connections now as well, I thought I'd make a suggestion on how to make this a bit more manageable.
If people have questions on LAT, how to set up DECservers, or something else, you can as usual just mail me.
First of all, please note that LAT is not a safe protocol. Everything goes in clear text, and malicious people can easily snoop your sessions.
My thoughts right now are in the area of services offered. When I list services I notice that some machine consoles are available, as well as some general machine logins.
The console services are nice to have (I also have a few of those), however, they are not useful for the general public, and the hope is that people who don't have anything to do with them don't connect to them. But they do clutter up the list of available services anyhow.
What I'd like to propose is that for services that aren't of general use should switch to another group. The default group is group #0, and that group is nice to continue to use for generally available systems that people might want to log in to.
I've been using group 1 for consoles for now, and I'd suggest that others do that too. Or perhaps pick some other group if you want to keep your machines separate. Notice that this does not really add anything from a security point of view, since people can change their own port to see services in any group if they really want to.
But if people set up their port to by default only be in group 0, and we place consoles in group 1, they will not show up in the general case, and you'd have to explicitly turn on group 1 when you want to play with consoles (or if you want it on by default, feel free, but it will look nicer to some atleast).
The same goes if you have printers, for instance, as services. Place them also in another group. Preferably in yet another group, but atleast not in group 0. And modems as well, if you have those.
So a suggested division of groups would be as follows:
0 General systems where people might log in.
1 Consoles
2 Modems
3 Printers
If you have all of that on the same DECserver you cannot be picky, however, since you can only specify one group for all services offered. Use the lowest group number for which you have a matching service in that case.
Note that the group numbers only affect which services are visible to users connected to a DECserver. It does not affect reverse LAT connections, which will find the right service no matter which group it is in.
So this is mostly just to make the list of services more convenient when you look as an interactive user on a DECserver.
Finally a short suggestion for those of you who have consoles as services. If you haven't found it, or set it up, I'd also suggest you place a password on those services, which can limit the possibility of others to wreak havoc on your machines... Just a suggestion.
It will still not prevent others from potentially DoS your console port.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
On 2010-10-05 23:59, Mark Wickens wrote:
Hi Guys,
Just to let you know that we had a circuit breaker trip here today and
when I restarted the VAXstation 4000/90 the Seagate ST39173N system disk
no longer spins up. The controller recognises the drive, and an LED on
the drive circuit board flashes once on power up and when it is queried
by the SCSI controller, but at no point does the drive spin up.
Ouch! Always unpleasant...
Try to perhaps shake it a bit if it is stuck.
Does anyone have any tips? I thought I had a duplicate drive I could try
swapping the controller board with, but I've yet to locate it. It might
be stuck heads, but given the circumstances it is more likely to be
something that has gone bang.
Stuck heads, or sometimes stuck spindle. Shaking might help. But you might be right in that it's something more serious...
This box hasn't been backed up in a while. I may have a working version
of the website on a backup, but there will be a few features missing if
the restore works.
Even worse.
In the meantime the website will be down.
Oh and also, if you haven't done that backup in a while, NOW IS THE TIME
TO DO IT!!!
You mean something like this?
.set /host
Host=PONDUS RSX-11M-PLUS V4.6 BL87
.que /li
** PRINT QUEUES **
PRINT (STOPPED) => TT30
FTSQUE => FTSDEQ
TT26 (STOPPED) => TT26
TT30 (STOPPED) => TT30
** BATCH QUEUES **
BATCH => BAP0 BAP1
[7,14] DST ENTRY:878 BLOCKED UNTIL 31-OCT-10 03:00
1 DU0:[DST]SETWINTER.BAT;1
BACKUP => BAP0 BAP1
[1,54] BACKUP ENTRY:913 BLOCKED UNTIL 13-OCT-10 09:00
1 DU0:[BACKUP]BACKUP.BAT;1
.sha dis
UMB Devices I/O Errors Status
055330 DU0:,*DU1: 0. 0. Load_Share, Catchup complete
.
(Backup job is run every week, and disk is mirrored...)
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Mark, my best guess is that the spindle is stuck. Put the drive upside down, reconnect and power on. The cables in a 4000-90 allow for this. If that fails, put it on its side, tap the spindle with a hammer and power up. It may just spin up one last time.
Hans
------Origineel bericht------
Van:Mark Wickens
Afzender:owner-hecnet at Update.UU.SE
Aan:hecnet at Update.UU.SE
Beantwoorden:hecnet at Update.UU.SE
Onderwerp: [HECnet] hecnet.eu website down
Verzonden: 5 okt. 2010 23:59
Hi Guys,
Just to let you know that we had a circuit breaker trip here today and
when I restarted the VAXstation 4000/90 the Seagate ST39173N system disk
no longer spins up. The controller recognises the drive, and an LED on
the drive circuit board flashes once on power up and when it is queried
by the SCSI controller, but at no point does the drive spin up.
Does anyone have any tips? I thought I had a duplicate drive I could try
swapping the controller board with, but I've yet to locate it. It might
be stuck heads, but given the circumstances it is more likely to be
something that has gone bang.
This box hasn't been backed up in a while. I may have a working version
of the website on a backup, but there will be a few features missing if
the restore works.
In the meantime the website will be down.
Oh and also, if you haven't done that backup in a while, NOW IS THE TIME
TO DO IT!!!
Regards,
Mark.
Verzonden vanaf mijn draadloze BlackBerry -toestel
Hi Guys,
Just to let you know that we had a circuit breaker trip here today and when I restarted the VAXstation 4000/90 the Seagate ST39173N system disk no longer spins up. The controller recognises the drive, and an LED on the drive circuit board flashes once on power up and when it is queried by the SCSI controller, but at no point does the drive spin up.
Does anyone have any tips? I thought I had a duplicate drive I could try swapping the controller board with, but I've yet to locate it. It might be stuck heads, but given the circumstances it is more likely to be something that has gone bang.
This box hasn't been backed up in a while. I may have a working version of the website on a backup, but there will be a few features missing if the restore works.
In the meantime the website will be down.
Oh and also, if you haven't done that backup in a while, NOW IS THE TIME TO DO IT!!!
Regards,
Mark.
Mark. A good way to "debug" the bridge is to send it SIGUSR1, upon which
it will dump to stdout a bunch of information.
Apart from that, you cannot see if the bridge is talking to your machine
or not, since the bridge is meant to be totally transparent from the
DECnet point of view.
One other thing: what is your ip address (or dns) and port number, so I
can check if my config file still have the right values...?
Johnny
Mark Wickens wrote:
I think I may have been experiencing multiple points of failure. Steve has kindly brought up the MULTINET tunnel to his systems, but it
looks like the link to MIM is still down:
NCP>show known circuits
Known Circuit Volatile Summary as of 22-SEP-2010 08:01:44
Circuit State Loopback Adjacent
Name Routing Node
ISA-0 on
TCP-0-19 on 19.41 (SG1)
What should I be seeing on the bridge to indicate that BUBBLE is talking
to it correctly? I'm presuming when the link is up I should see a
routing node against ISA-0 on the above circuit list?
Regards, Mark.
I think I may have been experiencing multiple points of failure.
Steve has kindly brought up the MULTINET tunnel to his systems, but it
looks like the link to MIM is still down:
NCP>show known circuits
Known Circuit Volatile Summary as of 22-SEP-2010 08:01:44
Circuit State Loopback Adjacent
Name Routing Node
ISA-0 on
TCP-0-19 on 19.41 (SG1)
What should I be seeing on the bridge to indicate that BUBBLE is talking
to it correctly? I'm presuming when the link is up I should see a
routing node against ISA-0 on the above circuit list?
Regards, Mark.
Fixed.
On 21 Sep 2010, at 17:42, Johnny Billquist wrote:
Guilty as charged. I was experimenting with my end of the bridge a couple of months ago, and commented out some lines that wasn't active at the time. You were among them, and I haven't turned them on again afterward. Sorry. Fixed in a few seconds...
Johnny
On 2010-09-21 23:37, Mark Wickens wrote:
Hi Guys,
My link to MIM via the bridge program isn't currently working, and I
can't work out why.
Any ideas?
I turned debugging on the bridge and got the following output:
Adding router ''local''. bfffcd18:79
Adding router ''update''. 1913ee82:4711
Adding DECnet bridge local.
Trying to match local
Matching against: local
Found match: local == local
Adding DECnet bridge update.
Trying to match update
Matching against: local
Matching against: update
Found match: update == update
Adding LAT bridge local.
Trying to match local
Matching against: local
Found match: local == local
Adding LAT bridge update.
Trying to match update
Matching against: local
Matching against: update
Found match: update == update
Host table:
0: local 0.0.0.0:0 (Rx: 0 Tx: 0 (Drop rx: 0)) Active: 1 Throttle: 0(000)
1: update 130.238.19.25:4711 (Rx: 0 Tx: 0 (Drop rx: 0)) Active: 1
Throttle: 0(000)
Hash of known destinations:
Adding new hash entry. Port is 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Adding new hash entry. Port is 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
I'm still down too....
Sampsa
On 21 Sep 2010, at 17:42, Johnny Billquist wrote:
Guilty as charged. I was experimenting with my end of the bridge a couple of months ago, and commented out some lines that wasn't active at the time. You were among them, and I haven't turned them on again afterward. Sorry. Fixed in a few seconds...
Johnny
On 2010-09-21 23:37, Mark Wickens wrote:
Hi Guys,
My link to MIM via the bridge program isn't currently working, and I
can't work out why.
Any ideas?
I turned debugging on the bridge and got the following output:
Adding router ''local''. bfffcd18:79
Adding router ''update''. 1913ee82:4711
Adding DECnet bridge local.
Trying to match local
Matching against: local
Found match: local == local
Adding DECnet bridge update.
Trying to match update
Matching against: local
Matching against: update
Found match: update == update
Adding LAT bridge local.
Trying to match local
Matching against: local
Found match: local == local
Adding LAT bridge update.
Trying to match update
Matching against: local
Matching against: update
Found match: update == update
Host table:
0: local 0.0.0.0:0 (Rx: 0 Tx: 0 (Drop rx: 0)) Active: 1 Throttle: 0(000)
1: update 130.238.19.25:4711 (Rx: 0 Tx: 0 (Drop rx: 0)) Active: 1
Throttle: 0(000)
Hash of known destinations:
Adding new hash entry. Port is 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Adding new hash entry. Port is 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Guilty as charged. I was experimenting with my end of the bridge a couple of months ago, and commented out some lines that wasn't active at the time. You were among them, and I haven't turned them on again afterward. Sorry. Fixed in a few seconds...
Johnny
On 2010-09-21 23:37, Mark Wickens wrote:
Hi Guys,
My link to MIM via the bridge program isn't currently working, and I
can't work out why.
Any ideas?
I turned debugging on the bridge and got the following output:
Adding router ''local''. bfffcd18:79
Adding router ''update''. 1913ee82:4711
Adding DECnet bridge local.
Trying to match local
Matching against: local
Found match: local == local
Adding DECnet bridge update.
Trying to match update
Matching against: local
Matching against: update
Found match: update == update
Adding LAT bridge local.
Trying to match local
Matching against: local
Found match: local == local
Adding LAT bridge update.
Trying to match update
Matching against: local
Matching against: update
Found match: update == update
Host table:
0: local 0.0.0.0:0 (Rx: 0 Tx: 0 (Drop rx: 0)) Active: 1 Throttle: 0(000)
1: update 130.238.19.25:4711 (Rx: 0 Tx: 0 (Drop rx: 0)) Active: 1
Throttle: 0(000)
Hash of known destinations:
Adding new hash entry. Port is 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Adding new hash entry. Port is 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
Setting existing hash to bridge 0
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
