Even random IP addresses, or just random ports?
Passive connections don't care about the incoming port or IP. In fact, Fred and I
accidentally proved this a couple of times when my ISP changed my IP. As long as I had
Fred's correct IP on my active end, Fred's passive end didn't care what my IP
was.
BTW, if exploited properly, that property could come in handy for people with dynamic
IPs.
And along those same lines, for /TCP=LISTEN circuits, the /REMOTE=ip modifier is
ignored.
you can set passwords on circuits.
Well, that might work with TCP circuits then. That'd at least give you some simple
password authentication. I suspect DECnet sends passwords in clear text, though, so
it'd be only trivially secure.
As for DDoS attacks on my DECnet port, it's not something I'm going to lose
sleep over....
Bob