home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!wupost!usc!cs.utexas.edu!qt.cs.utexas.edu!news.Brown.EDU!stout!robinson
- From: robinson@stout.geo.brown.edu (Darrin Robinson)
- Newsgroups: comp.os.vms
- Subject: Re: Alaram Journals [Was: About Discover any user wa...]
- Followup-To: comp.os.vms
- Date: 31 Dec 1992 16:23:57 GMT
- Organization: Massachusetts Institute Of Technology, Cambridge, MA
- Lines: 39
- Sender: darrin@mit.edu <Darrin Robinson/MIT InfoSys>
- Distribution: world
- Message-ID: <1hv6qtINNfb4@cat.cis.Brown.EDU>
- References: <A18520D1497F003099@EGFRCUVX>
- NNTP-Posting-Host: stout.geo.brown.edu
- Summary: About Discover any user wants enter to our node..
-
- In article <A18520D1497F003099@EGFRCUVX> SABRY@SHEBIN.EG (Sabry Kotob El-Ganzory) writes:
- >Hello All..........
- >Please, I'd like to write a DCl procedure (say .COM) which will discover any
- >User or anyone wants that enter our node from out our site.
- >Possible that.
- >Any suggestions??
- >Many Thanks!
- >Sabry
- >E-mail:sabry@shebin.eg
- >
- >
-
- Very EASY sabry (and it's in the FM)...
-
- Use VMS security features known as alarms under AUDIT... basically do this...
-
- $ set audit/alarm/enable= -
- (login:remote,logout:remote,logfail:remote,breakin:all)
-
- $ show audit
-
- This will set alarms for anyone logging in, logging out, or attempted failures
- (of failure), including ALL breakins on your system... You need the security
- privilege to do this and just make sure that you are enabled with security...
-
- $ reply/enable=(security)
-
- You can also archive these security related events to any file...
- see $ help set audit examples!
-
- Darrin
-
-
- . Darrin E. Robinson (DER31) Hamnet N1LLV 146.700-, 146.880- MHz
- /| Systems Programmer II Internet darrin@MIT.EDU
- \| Dist. Computing & Network Services robinson@Planetary.Brown.EDU
- |\ MIT Information Systems ICBMnet 41 29 24 N 71 18 48 W (NPT)
- |/ 1 Amherst St. - Rm E40-338 NASAmail derobinson@nasamail.nasa.gov
- . Cambridge, MA 02139, USA AT&Tnet (617) 253-0131
-