🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #662

Re: Doorknobs

#662
From: Jim Lick
Date: Tue, 06 Oct 1992 09:24
46 lines
2508 bytes
In <81115@ut-emx.uucp> ifbb657@ccwf.cc.utexas.edu (Douglas Floyd) writes:
>  How does one tell if someone is doing "doorknobs" on the network?
>Doorknobs is when someone tries the guest account, and other accounts
>with default passwords on varied systems to get access.

This system is set up with scripts which print out a message when this is
tried.  The message is:

-----

 The pig systems (piggy, ferkel, oinker, cavevax) DO NOT
 have guest accounts.  Please DO NOT try to log in here
 without authorization.  Repeated attempts to log in WILL
 result in a complaint being sent to your sysadmin.


 If you were trying to use ftp, you need to use the ftp
 program and not telnet to access files.  For basic help
 on using ftp, try the command 'finger ftp@ferkel.ucsb.edu'.


 If, on the other hand, you were looking for a free guest
 account, you should know that trying to log in on random
 systems is akin to walking down a street and checking for 
 unlocked front doors.  It is anti-social, and can get you 
 into trouble.  To look for public systems, consult the 
 USENET newsgroups alt.internet.services and alt.bbs.internet.

-----

The message is the .plan file, so it is displayed on finger attempts as
well.  The advantages of this are that logins show up in wtmp (which I
have mailed to me every morning), so you know when it happens.  The user is
warned not to do that here, and this is further reinforced by the promise to
notify their admin if it happens again.  It also redirects clueless folk who
don't know the difference between telnet and ftp.  And it tries to persuade
the user that such behaviour is wrong (or at least impolite!) and gives them
sources to find what they are looking for through legitimate means.

                            Jim Lick		       
Work: University of California	| Play: 1236 Camino Meleno
      Santa Barbara		|       Santa Barbara, CA 93111-1007
      Dept. of Mechanical Engr. |	(805) 964-2088 voice/msg
      2311 Engr II Building     |	(805) MUD-SPY1 data
      (805) 893-4113            |       jim@tcp.com
      jim@ferkel.ucsb.edu	| This space intentionally left blank
Technical Details
Message-ID: <jim.718363498@ferkel>
Path: arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!ferkel!jim
References: <81115@ut-emx.uucp>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!ferkel!jim
From: jim@ferkel.ucsb.edu (Jim Lick)
Subject: Re: Doorknobs
Message-ID: <jim.718363498@ferkel>
Organization: University of California, Santa Barbara
References: <81115@ut-emx.uucp>
Distribution: usa
Date: Tue, 6 Oct 1992 09:24:58 GMT
Lines: 47