home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!zaphod.mps.ohio-state.edu!sdd.hp.com!elroy.jpl.nasa.gov!usc!news.service.uci.edu!unogate!mvb.saic.com!arizona.edu!east.pima.edu!rharwood
- Newsgroups: vmsnet.sysmgt
- Subject: Re: HELP: Attempted break-ins?
- Message-ID: <1992Dec22.124421.1@east.pima.edu>
- From: rharwood@east.pima.edu
- Date: 22 Dec 92 12:44:21 MST
- References: <1992Dec18.145352.16583@vax5.cit.cornell.edu> <1992Dec21.215631.1@east.pima.edu>
- Distribution: vmsnet
- Lines: 22
-
- In article <1992Dec21.215631.1@east.pima.edu>, I write:
-
- > I personally always leave auditing enabled for failed logins and breakins. I
- > also have a .COM file in a batch queue that runs EVERY night, which reports the
- > time/terminal/userID of every failed login attempts during the previous 24
- > hrs... and I read this file RELIGEOUSLY.... I know when something "random" is
- > happening, and when it's becoming "systematic". I have *almost* caught people
- > trying to break into privileged accounts... I HAVE scared them off! <grin>
-
- Since several of you have asked for it, I have placed this file on
- min.pima.edu in the \vms\sysmgt directory under the name SECAUDIT.COM. You
- can get it there via anonymous ftp, or I'll EMail you a copy directly if you so
- request. I am compiling a list of people interested, so that as I collect
- comments and suggestions for improvement, I can easily let everyone who's
- interested know via EMail.
-
- Ray
- -----
- Ray Harwood |Data Basix |Adjunct Faculty, East Campus,
- Voice: (602)721-1988 |PO Box 18324 | Pima Community College
- FAX: (602)721-7240 |Tucson, AZ 85731 |Instructor in Ada and Pascal
- CompuServe: 76645,1370|AppleLink: DATA.BASIX|Internet: rharwood@east.pima.edu
-