INFO-VAX Mon, 09 Apr 2007 Volume 2007 : Issue 195 Contents: Re: more SMTP questions and comments OPCOM and TCPIP Services Re: OpenVMS V8.3 BACKUP /ENCRYPT Re: relative directories UPS Backup power ---------------------------------------------------------------------- Date: Sun, 08 Apr 2007 18:55:00 -0400 From: JF Mezei Subject: Re: more SMTP questions and comments Message-ID: <3212e$461972ec$cef8887a$24343@TEKSAVVY.COM> Phillip Helbig---remove CLOTHES to reply wrote: > I added the following addresses (in the appropriate syntax!) to my > Bad-Clients: list. Allegedly these are addresses completely under the > control of spammers. Is anyone else using this list? In the last few > !; Spamhaus DROP List 4/1/07 I use the spamhaus RBL. My bad clients list includes just a few blocks of chinese IPs. And this dates back to the days when VMS accepted emails for invalid users and then generated non delivery notifications. ------------------------------ Date: Mon, 09 Apr 2007 00:41:54 -0400 From: JF Mezei Subject: OPCOM and TCPIP Services Message-ID: <30953$4619c439$cef8887a$31596@TEKSAVVY.COM> There seem to be some variations on how varous portions of TCPIP services generates OPCOM messages. In some cases, the IP address is treated as a 32 bit integer, in some cases, a good IP address is displayed in dotted decimal notation, and in other cases, a reverse translation is done of the IP address, and in some cases, the name is truncated or otherwise unusuable. > %%%%%%%%%%% OPCOM 8-APR-2007 23:13:19.86 %%%%%%%%%%% > Message from user AUDIT$SERVER on CHAIN > Security alarm (SECURITY) and security audit (SECURITY) on CHAIN, system id: 103 > 5 > Auditable event: Network breakin detection > Event time: 8-APR-2007 23:13:19.86 > PID: 2160541C > Process name: TCPIP$FTPC00002 > Username: admin2 > Remote nodename: hn.kd.dhcp > Remote node id: 1026966587 > Remote username: FTP_3D36443B > Status: %LOGIN-F-NOSUCHUSER, no such user At the time of an attack, OPCOM messages should provide usable information right off the bat instead of providing untrustable or unusable information. In the above example, there is no usuable information. netstat, without flags: > tcp 0 41 chain.21 hn.kd.dhcp.46229 ESTABLISHED $ tcpip show dev bg27689 STREAM 21 46229 FTP 61.54.68.59 Now, I was able to deduct that this was the actual IP because it was the only FTP connection at that time. In this particular case, the chinese ISP provided a "fake" reverse translation (hn.hd.dhcp). It cannot be used to get the real IP address. SUGGESTION: The OPCOM messages should show the real IP address in standard IP address notation in the Remote node ID: field. (and I assume IPv6 notation for those IPs). And this should apply to all of the TCPIP components that can issue OPCOM messages. SUGGESTIONS: OPCOM ------------------------------ Date: Sun, 08 Apr 2007 22:02:12 +0200 From: Paul Sture Subject: Re: OpenVMS V8.3 BACKUP /ENCRYPT Message-ID: In article <5f011$46153983$cef8887a$21229@TEKSAVVY.COM>, JF Mezei wrote: > AEF wrote: > > Just exactly how do you get two save sets in a single file? > > $APPEND SAVESET1.SAV SAVESET2.SAV > > :-) :-) :-) :-) I was thinking of $ BACKUP SAVESET1.SAV,SAVESET2.SAV SAVESET3.SAV/SAVE_SET :-) -- Paul Sture ------------------------------ Date: Sun, 08 Apr 2007 21:42:59 +0200 From: Paul Sture Subject: Re: relative directories Message-ID: In article , koehler@eisner.nospam.encompasserve.org (Bob Koehler) wrote: > In article <4615527D.70801@comcast.net>, "Richard B. gilbert" > writes: > > > > Those of us who must use both VMS and Unix sometimes define Unix-like > > commands in their LOGIN.COM files and define VMS-like commands in > > .profile or .kshrc. > > This is most handy when you want a DCL symbol or shell alias for > some varition on a command, but don't want to cover up access > to the original command. > > Thus, on VMS I have > $ more == "type/page" > > and on UNIX > alias -x dir="ls -FC" > > So I can still get to naked type without deleting a symbol if I > want to, and to ls without using explicit /bin/ls. I try to adhere to that rule too - i.e leave the vanilla command alone. It is extremely frustrating when working at a customer site to find that you have inherited a bunch of someone else's abbreviations. When it comes to DCL command procedures, I will try to use the full VMS syntax, not just to ensure that code is less likely to break with upgrades or new products, but to make the code readable. An exception to the latter are "well known" abbreviations such as $ say = "write sys$output" but I'll put that in local code rather than relying on it being defined outside the scope of the procedure. > Using it as a crutch for commands that are just similar means > delaying learning and helping confuse yourself when your > simultaneously running EVE in one window and vi (ugh) in another. > > Ever type escape-something in EVE? "Unknown escape sequence read" -- Paul Sture ------------------------------ Date: 8 Apr 2007 11:07:11 -0700 From: number1hatfielder@hotmail.com Subject: UPS Backup power Message-ID: <1176055631.688046.10410@o5g2000hsb.googlegroups.com> Hi, I am looking into UPS Backup Power from APC and i have a few questions. I have 2 Dell Servers and A network switch etc. The switch is in a Cabinet with its own PDU. How do i connect the PDU to the UPS so that the power sockets from the PDU are powered from the UPS. I live in the UK and the UPS have IEC sockets. Regards, Anthony ------------------------------ End of INFO-VAX 2007.195 ************************