You're still trading an essentially liberty for a temporary security.
 
> logons at all) then allowing anyone to VT or telnet into your system and
> try :HELLO MANAGER.SYS;PARM=-1 until they guess your passwords is a difficult
> tradeoff. Aside from disallowing incoming VT or telnet access to your
> machine at all, there's not much you can do but sit there and watch them...
 
A better answer is non-UDC-based software that would disable logons to
MANAGER.SYS for 5 minutes after 3 unsuccessful attempts or, perhaps,
limit it to ldev 20 and the support modem.  Both could easily
be done with AIF:PE, and may be available from HP (is Security Monitor
on MPE/iX?) or VEsoft.
 
Remember my analogy....you're saying "but, my house is on the main
street, so a lot of people can try to enter it".  When the fire comes,
you'll regret the security bars on the windows.
 
--
Stan Sieler                                          [log in to unmask]
                                     http://www.allegro.com/sieler.html