HDTenEightyP/NetNews huggingface dataset:
From: pmetzger@snark.shearson.com (Perry E. Metzger)
Subject: Re: SMTP mail
Reply-To: pmetzger@shearson.com
Organization: Lehman Brothers
	<1992Jul29.083024.1@ptavv.llnl.gov>
	<1992Jul29.175238.20719@mmm.serc.3m.com>
Date: Wed, 29 Jul 1992 21:10:35 GMT


In article <1992Jul29.175238.20719@mmm.serc.3m.com> ccg@tcdsp1.mmm.com ("Charles Ganzhorn") writes:

>I'd like to jump in here and ask a couple of questions:

>What is MIME?

A multimedia mail standard that uses SMTP transport.

>Secondly, I fail to see why forgery is not considered a breach of security.

A breech of security is when someone can gain unauthorized access to
your host; the sendmail debug verb that the Morris worm took advantage
of was a security hole. A breech of authentication is what forgery
permits, in which you cannot know who sent you a message. As has been
pointed out repeatedly, this is also a problem with paper letters. As
has also been pointed out, PEM and similar systems are the proper way
to address this problem.

>Next, saying that mail doesn't require privacy is just caving in to
>the fact that I can't get it with SMTP.

Privacy is a third issue entirely, different from host security and
authentication. To assure privacy, no method will work other than
cryptography, period. The internet is not and cannot be secure in its
transmitions; with hundreds of thousands of miles of line, its
impossible to keep people from tapping some of it. This is NOT an SMTP
failing.

--
Perry Metzger		pmetzger@shearson.com
--
		  Just say "NO!" to death and taxes.
			 Extropian and Proud.
Newsgroups: comp.protocols.tcp-ip
From: andr@elvis.sovusa.com (Andrei Arkhipov)
Subject: DesqView/X
Reply-To: andr@elvis.sovusa.com
Organization: ELVIS Corp.
Date: Sun, 26 Jul 92 02:11:53 GMT

I wonder if DesqView/X is working on PC-NFS 4.0.

   Andrei.
From: barmar@think.com (Barry Margolin)
Newsgroups: comp.protocols.tcp-ip
Subject: Re: Firewall usage
Date: 29 Jul 1992 00:15:34 GMT
Organization: Thinking Machines Corporation, Cambridge MA, USA
NNTP-Posting-Host: telecaster.think.com

In article <1992Jul28.010344.9414@PA.dec.com> mogul@pa.dec.com (Jeffrey Mogul) writes:
>Alas, while parts of the Internet can (and should) continue to follow
>the "everything not forbidden is permitted" approach, which allows for
>evolution, other parts have to follow the "everything not permitted
>is forbidden" rule.

I'm the maintainer of part of our firewall, and I unfortunately have to
agree that in many circumstances (like ours), the second rule is necessary.

We have developers here implementing new protocols all the time, such as
inter-machine diagnostics and special-purpose file access.  With the first
rule, these would suddenly become accessible to anyone on the Internet, and
crackers could wreak havoc with our development systems (or maybe even
destroy or get access to proprietary data).  The second rule is more
limiting, but it's the only thing that works when the environment on this
side of the firewall is very open.

-- 
Barry Margolin
System Manager, Thinking Machines Corp.

barmar@think.com          {uunet,harvard}!think!barmar
Newsgroups: comp.protocols.tcp-ip
From: nrt@watson.ibm.com (Nicholas R. Trio)
Subject: Re: Digital Pathway ?
Date: Mon, 27 Jul 1992 15:40:55 GMT
Distribution: usa
Disclaimer: This posting represents the poster's views, not necessarily those of IBM
Organization: IBM T.J. Watson Research Center

In article <1992Jul27.135644.18760@uwm.edu> hardiman@csd4.csd.uwm.edu (Paul V Hardiman) writes:
>
>Can anyone provide a phone number or address for Digital Pathway?

Digital Pathways
201 Ravendale Drive
Mt. View, CA 94043

Nick Tri (nrt@watson.ibm.com)
IBM T.J. Watson Research Center



Newsgroups: comp.protocols.tcp-ip
From: nrt@watson.ibm.com (Nicholas R. Trio)
Subject: Re: Firewall usage (was: Re: ping works, but ftp/telnet get "no route)
Date: Fri, 24 Jul 1992 20:35:44 GMT
Disclaimer: This posting represents the poster's views, not necessarily those of IBM
Organization: IBM T.J. Watson Research Center

I do use firewalls/secure servers here at IBM.  I've sometimes thought
of myself as a "bad neighbor" or a leach since my users can get out
to the Internet, but we don't really provide much return service for
others.  However, it is a necessary evil because of folks who I'm sure
would love to get into our systems.

When someone asks me about networks, I think of them as a highway, with
folks host systems/workstations as houses with front doors and locks
on them.  In an ideal environment, every workstation or host would have
really secure front doors on them, and everyone can drive up to the houses
anywhere on the net...only if they have the right key can they get
into the house.

The problems are (1) the "front doors" to the computers just aren't strong
enough and (2) even if they were, it's possible to get copies of the
"keys" (passwords, etc.) by sniffing the network.  Thus, for the most
part, I have to have a gate that only allows folks to get out, and only
lets in those who are authentic users.

Authentication is possible (many places are using authenticator
"smart cards" like the Digital Pathways' Secure-Net Key which allows
for authentication of remote users.  However, for the immediate future,
I suspect many organizations worried about who's "driving up to their
door" will use firewalls.

Nick Trio (nrt@watson.ibm.com)
IBM T.J. Watson Research Center



Newsgroups: comp.protocols.tcp-ip
From: harvey@indyvax.iupui.edu
Subject: Re: Decnet Packets over Sun Router ??
Organization: Indiana University
Distribution: world,local
Date: 24 Jul 92 19:50:35 -0500

In article <1992Jul23.193824.15759@eco.twg.com>, reece@eco.twg.com (Reece R. Pollack) writes:
>
> In article <1992Jul22.200123.3530@arizona.edu>, leonard@telcom.arizona.edu
> |>| In article <1992Jul20.151114.9155@ee.eng.ohio-state.edu>, redmill@ee.eng.ohio-state.edu (Keith A.
> |>| Redmill) writes:
> |>| |> I have a Sun 4 (IPC) with two ethernet cards running as a router for
> |>| |> a small subnet.  I would like to install some vax stations under this
> |>| |> subnet but Decnet packets don't seem to make it through the sun routed
> |>| |> software.
> |>| |>
> |>| |> Can this be done??
> |>There's one more solution which we use here in similar situations:
> |>if the VAXen are running MultiNet, then just set up MultiNet to
> |>encapsulate DECnet IV in TCP/IP.  (You also need a friendly
> |>VAX on the backboneward side of the Sun to pull the DECnet
> |>out of the TCP/IP packets and route them onward to the
> |>rest of your DECnet.)  A fast, reliable, cheap solution (assuming
> |>you've already got MultiNet!)
>
> Or WIN/TCP. The next release (called Pathway for VMS V1.0; don't ask why)
> also supports DECnet over IP.

Is the method used compatible with the method used by MultiNet?

> --
> Reece R. Pollack
> Senior Software Engineer
> The Wollongong Group, Inc.
--
James Harvey    IUPUI OIT Technical Support/Networks
harvey@iupui.edu  uucp: iugate!harvey  bitnet: harvey@indyvax
Xref: sparky comp.protocols.tcp-ip:3869 comp.unix.sysv386:12557
From: ebc@uis.co.za (Errol Back-Cunningham)
Newsgroups: comp.protocols.tcp-ip,comp.unix.sysv386
Subject: Wang/SCO communications.
Keywords: Wang SCO TCP/IP
Date: 27 Jul 92 10:11:02 GMT
Followup-To: poster
Organization: Unix Information Systems (Pty) Ltd (UIS)


Does anyone have experience of connecting a Wang VS100 running
VS 7.21.03 to a SCO UNIX 486 for a remote login session? 

We're using TCP/IP and the SCO login screen keeps scrolling,
making login inpossible.  Are there any other connectivity
products available, or, does anyone know what problem we might
be encountering?

======================================================================
Errol Back-Cunningham                         ebc@uis.co.za
Unix Information Systems (Pty) Ltd (UIS)      Tel +27 21 4194107
Cape Town, South Africa                       Fax +27 21 252828
Organisation: European Space Operation Centre (E.S.O.C)
Date: Monday, 27 Jul 1992 11:17:48 CET
From: Karl Keyte <KKEYTE@ESOC.BITNET>
Newsgroups: comp.protocols.tcp-ip
Subject: UDP Broadcast - Maximum message size

Does anyone know why (on our Sun 4 systems) UDP point-to-point messages
can be up to around 16KB (by setting the send buffer size), but
broadcast messages under 1KB?  Can we change this?  Are we doing something
wrong or forgetting to do something to allow us to broadcast larger
messages?

Please help!  Reply directly to me please:  KKEYTE@ESOC.BITNET

Thanks,

Karl
Newsgroups: comp.protocols.tcp-ip
From: umrice02@ccu.umanitoba.ca (Stephen Rice)
Subject: Summary: Solutions(?) to NCSA Telnet Problems
Summary: This is a summary of the responses I have received.
Keywords: NCSA, TCP/IP, SOSS, Telnet, FTP
Organization: University of Manitoba, Winnipeg, Canada
Date: Thu, 23 Jul 1992 14:39:36 GMT

After posting a message regarding the problems I was facing regarding the use
of NCSA Telnet I received many replies.  This is a summary of those responses.

-------------------------------------------------------------------------------

NCSA Telnet will not allow you to log into a machine placed in host mode using
the 'telnet' command, only 'ftp' is allowed.

Telnetd, the Waterloo TCP stand-alone Telnet server will allow you to do this
and is available at sunee.uwaterloo.ca in directory pub/wattcp.  Though I have
downloaded this myself I have not got it working yet.

I have got SOSS working successfully on our network.  For those of you un-
familiar with this package, it is a package which allows you to mount IBM
PC disks on your unix machine using NFS.  It has a few shortcomings, 

1.	You must leave the machine in 'NFS server' mode.  The program is
	not memory resident, etc.  (though this is true for 'ftp'ing into
	a PC running NCSA Telnet also).

2.	You cannot mount a PC disk on another PC using this package though
	I understand using IDRIVE by FTP software or PC-NFS by Sun Micro-
	Systems will allow this.

Current Situation:  We have our PCs configured to run either SOSS or NCSA
Telnet server mode.  We can mount or ftp to any of the PCs (or from any of
the PCs to unix via Telnet/FTP) AND anyone can use the printer via NCSA's
lpr (included with Telnet).

Aside:

Number 2. above also raises the question.  We are running Interactive UNIX
(now owned by Sun) and there is a 'pcnfs' daemon.  Why?  Using SOSS we can
use the normal NFS daemon used by other UNIX systems why can't PC-NFS? --
Just my $0.02 (prices slightly higher in Canada, please include GST).
-- 
+-----------------------------------------------------------------------------+
Stephen Rice                                          "I am, therefore I think"
umrice02@ccu.umanitoba.ca                 "These are definitely my own opinions
University of Manitoba  CANADA                  or I would not have said them."
Newsgroups: comp.protocols.tcp-ip,comp.protocols.pcnet
From: rh0083b@medtronic.COM (Roger-Hunen)
Subject: Re: Clemson University Packet Driver: I have one problem B-(.
Organization: Medtronic, Inc.
Date: Mon, 27 Jul 1992 07:26:37 GMT

In article <AJOhJRg8RQ@ntc.togliatti.su> saty@ntc.togliatti.su writes:
>I write some application ( TSR type ) based on Packet Driver
>( Clemson University Engineering Comp Ops Version 9) and I have
>one tragic problem. I can not send ethernet packets while
>my receive handle works. How can I do it correctly?
>My ethernet card is 3C505.

I suppose that you try to send a packet while you are in the receiver
(called by the packet driver)? Well, I vaguely remember a statement from
Russ Nelson that this may not work with 1.09 compliant drivers. The spec
does not say anything about this, but the general consensus is that it is
bad practice.

What you could do is to have the response packet sent at the next timer
interrupt.

Regards,
-Roger
From: markb@spock.dis.cccd.edu (Mark Bixby)
Newsgroups: comp.protocols.tcp-ip
Subject: ping works, but ftp/telnet get "no route to host"
Date: 22 Jul 92 03:43:20 GMT
Organization: Coast Community College District, Costa Mesa, CA

Why would I be able to ping a site OK, but when I try to ftp or telnet to it
I receive a "no route to host" error?  Traceroute can find the host, and it
is apparently on Alternet, if that makes a difference.

Any info would be most helpful to this tcp/ip novice.  Thanks.

-- 
Mark Bixby                         Internet: markb@spock.dis.cccd.edu
Coast Community College District   1370 Adams Avenue
District Information Services      Costa Mesa, CA, USA  92626
Technical Support                  (714) 432-5064
"You can tune a file system, but you can't tune a fish." - tunefs(1M)
Newsgroups: comp.protocols.tcp-ip
From: billp@Syntex.COM (Bill Putney)
Newsgroups: comp.protocols.tcp-ip
Subject: TCP/IP for Wang VM? Does it exist?
Keywords: Wang VM packages
Date: 24 Jul 92 16:12:26 GMT
Reply-To: billp@Syntex.COM (Bill Putney)
Distribution: usa
Organization: Syntex (U.S.A.), Inc.
Originator: billp@niagara

HELP!!!!

Does anyone out there know of a package that will allow a Wang
VS8000 running VM to communicate with TCP/IP users on a LAN?

Wang has come out with TCP/IP for VM (kind of...).  It implements
out bound telnet but not in bound.  People with some standard
connection to the Wang can telnet to other hosts but people on
other hosts (or terminal servers or PC's running TCP/IP or...)
can't connect to the Wang.

We are trying to convert all of our network connections to TCP/IP
and the Wang VM systems are the last hold out.

Thanks, Bill
From: danson@lgc.com (Doug Anson)
Newsgroups: comp.protocols.tcp-ip
Subject: RPC daemons using TCP
Keywords: RPC TCP INETD RPCGEN
Date: 21 Jul 92 17:54:21 GMT
Organization: LandMark Graphics Corporation LGC

Hi:

Does anyone know of any sources for examples of RPC based daemons
that use TCP transports and are fired off by inetd?  I am trying to
develop a daemon that will be fired off by inetd and will satisfy
RPC requests using the TCP transport. TCP is a requirement in this 
particular case. 

Anyway, I have read the man pages on using rpcgen to create the appropriate
stubs for use with inetd. However, these stubs apparently only work when I
use UDP for the transport (surely I'm missing some point here..)

I would appreciate any help, direction, comments you might have.

Thanks,
Doug

-- 
-------------------------------------------
Doug Anson					
Internet: danson@lgc.com			
Phone:	  713-579-4739
SNAIL:    Landmark Graphics Corporation LGC	
	  333 Cypress Run			
	  Houston, TX 77094			
-------------------------------------------
Newsgroups: comp.protocols.tcp-ip
From: stehman@sutekh.cs.clemson.edu (Jeff Stehman)
Subject: interactive vs. redirected port 25 connections
Organization: Clemson University Computer Science Dept.
Date: Fri, 31 Jul 1992 13:26:08 GMT


If I telnet to port 25 (on a Sun), type a command, then quit, the
connection is shown by a netstat for over a minute.  Once I quit, the
status of the connection is TIME_WAIT.  If I telnet again, this time
redirecting input from a file that contains the same commands, the
connection opens and closes in about a second.  Why?  Ever since I was
a little Unix tyke I was told that redirecting input from a file was
the same as typing.  I feel so... so lost. ;-)  Anyway, if someone
could explain, I'd appreciate it.

--
Jeff Stehman			Systems Staff, G-18A Jordan
stehman@cs.clemson.edu		Dept. of Computer Science
(803)656-2639			Clemson University
Newsgroups: comp.protocols.tcp-ip
Subject: Help remote service query
From: eitan@wiscon.weizmann.ac.il (Shternbaum Eitan)
Date: Tue, 28 Jul 1992 11:38:47 GMT
Organization: Weizmann Institute of Science, Computation Center.
Originator: eitan@pashosh.wisdom.weizmann.ac.il


I'm writing an application that need to preform a search for a service on a remote host cluster.

since the agent that initiates the call isn't bounded to the host cluster
it can't use YP/NIS.

Is there another way for doing this ?

Thanks in advance

Eitan Shterenbaum
From: ridder@zso.dec.com (Hans Ridder)
Newsgroups: comp.protocols.tcp-ip
Subject: Problem with ASCII mode FTP
Date: 28 Jul 92 18:58:32 GMT
Organization: Digital Equipment Corporation - DECwest Engineering
Originator: ridder@zowie.zso.dec.com

I have a question regarding the use of CR/NUL sequences in ASCII mode
FTP transfers.  One particular PC implementation of FTP, when sending,
is converting a bare CR (intending to "overprint") into a CR/NUL.  When
received by the ftpd on Ultrix, the NUL is not stripped.  This NUL then
causes a problem when the file is printed, but that's another issue.

Checking the FTP RFC, it says that ASCII mode should use the TELNET NVT
protocol.  The TELNET RFC says that bare CR's should never appear in the
data stream, that when sending they should be converted to CR/NUL, and
back to local format on receive.  The FTP RFC talks quite a bit about
various aspects of CR/LF processing, but never mentions CR/NUL.

From all this reading, I conclude that the Ultrix ftpd (and possibly
ftp) is broken, and should be stripping the NUL.  Checking the source
code revealed there is code to strip the NUL, but it is #ifdef'd out.
Are all BSD derived implementations the same?

Should this ftpd be stripping the NUL following the CR, or not?  I say
yes, however I wanted to check with all you for any folklore and
opinions on the issue.  Thanks!

-hans
-- 
  Hans-Gabriel Ridder				Digital DECwest Engineering
  ridder@rust.zso.dec.com			Bellevue, Washington, USA
  {pacbell,pyramid,uunet}!rust.zso.dec.com!ridder
Newsgroups: comp.protocols.tcp-ip
From: alan@oetl1.scf.lmsc.lockheed.com (Alan Strassberg)
Subject: Re: ODI and Clarkson driver spec
Organization: Lockheed M & S Co., Santa Cruz, California
Date: Sat, 25 Jul 92 16:37:22 GMT

In article <711771662snx@crynwr.com> nelson@crynwr.com (Russell Nelson) writes:
>In article <1992Jul20.170533.19619@pacdata.uucp> johnr@pacdata.com writes:
>
>   Would a kind soul point me in the right location to find the
>   ODI (Open Data-link Interface) specification and the

	The ODI specs can be found on ftp.is.sandy.novell.com
	(137.65.12.2) in odi/specs. Here's the readme.txt from
	there below.

					alan

This directory contains specifications for the Novell Open Datalink Interface
specification (ODI).

The ODI provides a media independent mechanism for multiple flavours of
overlying network and transport protocols to share LAN interfaces
within network entities. Currently, specifications exist for the DOS, OS/2
and NetWare 3.X server environments. Of course, implementations of all
the ODI specifications exist and are available from Novell.

Note: These specifications are provided as informational pieces only.
      Driver developers should contact Novell Labs regarding professional
      developer programs, training and toolkits. Details are in the README
      files contained in the various ZIP files.

The relevant files are:

      ODI_SRV.ZIP:	Specs for the NetWare 3.X server ODI
      ODI_DOS.ZIP:	Specs for the (DR)(MS)(PC)-DOS ODI
      ODI_OS2.ZIP:	Specs for the IBM OS/2 ODI

Refer to the "LICENSE.TXT" files for legal details on what you may and
may not do with these files.
-- 
Alan Strassberg   alan@oetl1.scf.lmsc.lockheed.com     (408) 425-6139
Newsgroups: comp.protocols.tcp-ip
From: andr@elvis.msk.su (Andrei Arkhipov)
Subject: SLIP connection between Sun and PC/ICS Unix
Organization: ELVIS Corp.
Date: Tue, 21 Jul 92 15:04:18 GMT

Hi.
 
Did anybody do SLIP connection between Sun SPARCstation under SunOS 4.1.1 and
PC under ISC?
 
What I need to know is what software I need on both sides, installation and 
connection procedure (maybe some special points only).
 
Thank you in advance,
              Andrei.
From: cliff@garnet.berkeley.edu (Cliff Frost)
Newsgroups: comp.protocols.tcp-ip
Subject: Re: Firewall usage (was: Re: ping works, but ftp/telnet get "no route)
Date: 27 Jul 1992 21:12:36 GMT
Organization: University of California, Berkeley
Distribution: world
NNTP-Posting-Host: garnet.berkeley.edu

|>
|> >>I wish I had a transcript of Dave Clark's talk at the IETF last week.
|> >>He said some great things about firewall gateways and mailbridges, and
|> >>how they've essentially destroyed the whole purpose of having an IP
|> >>internet, and have forced a lot of us to use mail as a transport-level
|> >>protocol.
|>
|> Dave is usually correct, but as he thinks quite a bit more than many, and
|> says what he thinks, he is frequently not correct. Send him mail and ask
|> for a copy, or invite him to write. Perhaps he's been misstated in this
|> summary of his remarks.

Yes, I believe Dave Clark's points have been somewhat twisted in this
discussion.

What I thought I heard him say is that good host security is very important
because without it people are forced to use firewalls and mail relays.  It's
hard to argue this point, and Dave Clark most certainly did *not* criticize
anyone for using firewalls or mail relays.

The follow on point (which ji referred to), is that IP (and UDP/TCP and
the support infrastructure) was designed for end-to-end connectivity, so
firewalls and mail relays break the architectural model.  It's pretty hard
to argue with this also.

For a common example of the problems this creates, consider the DNS.
The DNS is designed so that all hosts get the same answer to the same
query.  This is a problem for people who have corporate internets hidden
from The Internet, because they often want the corporate machines to get
one set of info from the DNS and for machines on The Internet to get a
different set of info.  The most common example is MX records, of course.

	Cliff Frost
	UC Berkeley
Newsgroups: comp.protocols.tcp-ip
From: gmarzot@mitre.org (G. S. Marzot)
Subject: Sun HSI/S card
Organization: MITRE Corp.
Date: Thu, 30 Jul 1992 21:47:33 GMT

Just a query to see if anyone has used the Sun HSI/S high speed serial
interface S-Bus card. any comments, sample code, rumors, anything.
Thanks in advance,
GSM