Re: Rules Facility

Article View: bit.listserv.l-vmctr

Article #105

Back to bit.listserv.l-vmctr Previous Next

#105

From: Steven P. Roder
Date: Thu, 08 Oct 1992 15:27

22 lines
1625 bytes

On Thu, 8 Oct 1992 11:15:36 EDT Gary Sponseller said:
>On Wed, 7 Oct 1992 14:20:40 PDT John Sroka said:
>>Hmmm... we have user rules set up to only allow a select set of LUs
>>access to certain SCI user ids.  However the Rules Facility seems to
>>ignore the restrictions when a user dials in on a 'virtual' LU such
>>as the ones created by IBM's VM TCP/IP product (Lnnn).  Has anyone
>>else noticed this?
>
>It would help if you give a sample rule that fails... ;-)
>
>We use rules like:  ACCEPT L1%% LOGON ( NETID
>(assuming NORULE REJECT) and logon is certainly contained by the desired
>terminal types.  For example, Telnet session like L001 are rejected,
>while those like L111 are accepted.

Perhaps, if you want the rule to govern logical devices (rather than Network
devices), use the LDEV option, rather than NETID.  We are running VMSECURE/E,
and LDEV works.  I believe LDEV was introduced quite some time ago.


Steve Roder
(tkssteve@ubvm.bitnet | tkssteve@ubvm.cc.buffalo.edu | (716)645-3564

Technical Details

Message-ID: <L-VMCTR%92100811311113@VM1.CC.UAKRON.EDU>

Path: arc1-ca.pugleaf.net!sparky!uunet!uvaarpa!darwin.sura.net!paladin.american.edu!auvm!UBVM.CC.BUFFALO.EDU!TKSSTEVE

Show Full Headers

Complete Article Headers

Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Path: arc1-ca.pugleaf.net!sparky!uunet!uvaarpa!darwin.sura.net!paladin.american.edu!auvm!UBVM.CC.BUFFALO.EDU!TKSSTEVE
Organization: State University of New York at Buffalo
Message-ID: <L-VMCTR%92100811311113@VM1.CC.UAKRON.EDU>
Newsgroups: bit.listserv.l-vmctr
Date:         Thu, 8 Oct 1992 11:27:13 EDT
Sender:       VMCENTER Components Discussion List <L-VMCTR@AKRONVM.BITNET>
From:         "Steven P. Roder" <TKSSTEVE@UBVM.CC.BUFFALO.EDU>
Subject:      Re: Rules Facility
In-Reply-To:  Message of Thu, 8 Oct 1992 11:15:36 EDT from <SPONSELL@AKRONVM>
Lines: 22