HP3000-L Archives

November 2000, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
George Willis <[log in to unmask]>
Reply To:
George Willis <[log in to unmask]>
Date:
Thu, 16 Nov 2000 08:29:06 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (56 lines)
After modifying JINETD job to create an FTPLOG file, I still don't get any
entries logged to this file. What am I missing?

George Willis


-----Original Message-----
From: Donna Garverick [mailto:[log in to unmask]]
Sent: Tuesday, November 14, 2000 5:22 PM
To: [log in to unmask]
Subject: Re: [HP3000-L] Determining 'source' of FTP connection


Mark Bixby wrote:

> Paul H Christidis wrote:
> > Is the IP address of the client that establishes an FTP connection to an
HP
> > 3000 stored in any log file?

someone very quietly posted something about ftp logging on the list a
couple(?)
of weeks ago.  when i read it, i said 'oh really!?!?!' and changed my inetd
job
to....

!#  create the logfile if it doesn't already exist
!continue
!build ftplog.arpa.sys;rec=-256,,f,ascii;disc=4096
!continue
!altsec ftplog.arpa.sys;NEWACD=(R,W,A:@.@)
!run inetd.net.sys
!eoj

some of that should look pretty familiar :-)

> Since FTPSRVR is now spawned from INETD, you can use INETD -l logging to
> capture the remote IP address for each new connection to INETD.
>
> Another thing I'd like to see is JINETD default to -l.  Good security
should
> always be the default configuration.  :-)

oh do tell us more, mark :-)  because....

what's getting logged using the above is pretty darn pitiful.  on my 995 --
which
is ftping constantly -- i've got 15(!!!) entries since november 7th.
- d

--
Donna Garverick              | PROGRAM, tr. v., An activity similar
Longs Drug Stores            | to banging one's head against a wall,
925.210.6631                 | but with fewer opportunities for
[log in to unmask]         | reward.

ATOM RSS1 RSS2