Article View: comp.security.misc
Article #662Re: Doorknobs
From: Jim Lick
Date: Tue, 06 Oct 1992 09:24
Date: Tue, 06 Oct 1992 09:24
46 lines
2508 bytes
2508 bytes
In <81115@ut-emx.uucp> ifbb657@ccwf.cc.utexas.edu (Douglas Floyd) writes:
> How does one tell if someone is doing "doorknobs" on the network?
>Doorknobs is when someone tries the guest account, and other accounts
>with default passwords on varied systems to get access.
This system is set up with scripts which print out a message when this is
tried. The message is:
-----
The pig systems (piggy, ferkel, oinker, cavevax) DO NOT
have guest accounts. Please DO NOT try to log in here
without authorization. Repeated attempts to log in WILL
result in a complaint being sent to your sysadmin.
If you were trying to use ftp, you need to use the ftp
program and not telnet to access files. For basic help
on using ftp, try the command 'finger ftp@ferkel.ucsb.edu'.
If, on the other hand, you were looking for a free guest
account, you should know that trying to log in on random
systems is akin to walking down a street and checking for
unlocked front doors. It is anti-social, and can get you
into trouble. To look for public systems, consult the
USENET newsgroups alt.internet.services and alt.bbs.internet.
-----
The message is the .plan file, so it is displayed on finger attempts as
well. The advantages of this are that logins show up in wtmp (which I
have mailed to me every morning), so you know when it happens. The user is
warned not to do that here, and this is further reinforced by the promise to
notify their admin if it happens again. It also redirects clueless folk who
don't know the difference between telnet and ftp. And it tries to persuade
the user that such behaviour is wrong (or at least impolite!) and gives them
sources to find what they are looking for through legitimate means.
Jim Lick
Work: University of California | Play: 1236 Camino Meleno
Santa Barbara | Santa Barbara, CA 93111-1007
Dept. of Mechanical Engr. | (805) 964-2088 voice/msg
2311 Engr II Building | (805) MUD-SPY1 data
(805) 893-4113 | jim@tcp.com
jim@ferkel.ucsb.edu | This space intentionally left blank
Technical Details
Message-ID:
<jim.718363498@ferkel>Path:
arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!ferkel!jimReferences:
<81115@ut-emx.uucp>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!ferkel!jim From: jim@ferkel.ucsb.edu (Jim Lick) Subject: Re: Doorknobs Message-ID: <jim.718363498@ferkel> Organization: University of California, Santa Barbara References: <81115@ut-emx.uucp> Distribution: usa Date: Tue, 6 Oct 1992 09:24:58 GMT Lines: 47