SMTP-over-DECnet security

Thread View: vmsnet.mail.mx

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Dan Wing Tue, 29 Dec 1992 22:32

#351

Author: Dan Wing
Date: Tue, 29 Dec 1992 22:32

15 lines
1296 bytes

In the MX version 3.1 manual, section 3.8.1, "Creating a DECnet Object for
DECnet-SMTP", it recommends creating a proxy to allow other systems to use
the username for the SMTP DECnet object on your local node.

Wouldn't this allow a user on the remote system (SYSTEM, or MAILER, or
whatever is the user on the remote system) to get your system to run FAL and
have access to your system, or am I missing something?  It seems more secure
to require the remote system use the normal DECnet login method (the NCP
database supplies the username, password, and the file to execute) -- it
seems like this then locks the remote user into executing the pre-defined
.EXE (or .COM, however you set it up) which can then do nothing more than
deliver mail all over the place.

-Dan Wing, dwing@uh01.colorado.edu or wing_d@ucolmcc.bitnet (DGW11)
 Systems Administrator, University Hospital, Denver

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads