Re: HELP: Attempted break-ins?

Article View: vmsnet.sysmgt

Article #84

#84

From: rharwood
Date: Tue, 22 Dec 1992 19:44

22 lines
1728 bytes

In article <1992Dec21.215631.1@east.pima.edu>, I write:

> I personally always leave auditing enabled for failed logins and breakins. I
> also have a .COM file in a batch queue that runs EVERY night, which reports the
> time/terminal/userID of every failed login attempts during the previous 24
> hrs... and I read this file RELIGEOUSLY.... I know when something "random" is
> happening, and when it's becoming "systematic".  I have *almost* caught people
> trying to break into privileged accounts... I HAVE scared them off!  <grin>

Since several of you have asked for it,  I have placed this file on
min.pima.edu in the \vms\sysmgt directory under the name SECAUDIT.COM.  You
can get it there via anonymous ftp, or I'll EMail you a copy directly if you so
request.  I am compiling a list of people interested, so that as I collect
comments and suggestions for improvement, I can easily let everyone who's
interested know via EMail.

Ray
-----
Ray Harwood           |Data Basix           |Adjunct Faculty, East Campus,
Voice: (602)721-1988  |PO Box 18324         |   Pima Community College
FAX:   (602)721-7240  |Tucson, AZ 85731     |Instructor in Ada and Pascal
CompuServe: 76645,1370|AppleLink: DATA.BASIX|Internet: rharwood@east.pima.edu

Technical Details

Message-ID: <1992Dec22.124421.1@east.pima.edu>

Path:

arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!sdd.hp.com!elroy.jpl.nasa.gov!usc!news.service.uci.edu!unogate!mvb.saic.com!arizona.edu!east.pima.edu!rharwood

References: <1992Dec18.145352.16583@vax5.cit.cornell.edu> <1992Dec21.215631.1@east.pima.edu>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!sdd.hp.com!elroy.jpl.nasa.gov!usc!news.service.uci.edu!unogate!mvb.saic.com!arizona.edu!east.pima.edu!rharwood
Newsgroups: vmsnet.sysmgt
Subject: Re: HELP: Attempted break-ins?
Message-ID: <1992Dec22.124421.1@east.pima.edu>
From: rharwood@east.pima.edu
Date: 22 Dec 92 12:44:21 MST
References: <1992Dec18.145352.16583@vax5.cit.cornell.edu> <1992Dec21.215631.1@east.pima.edu>
Distribution: vmsnet
Lines: 22

Reply to Parent Message