Conference 7.286::atarist

1305.0. "Direct world access with ftp from inside DEC" by BERN01::RUGGIERO (Markus from Switzerland) Fri Aug 28 1992 03:09

    I posted the following to the Macintosh notesfile some time ago
    and just realized that this info belongs in here, too.

    ---markus---

    (btw the mentioned security aspect has already been discussed)



From conference 
             <<< VMSMKT::$1$DIA3:[NOTES$LIBRARY]MACINTOSH.NOTE;2 >>>

================================================================================
Note 45.32             Using FTP from inside DEC Networks               32 of 37
BERN01::RUGGIERO "Markus from Switzerland"          125 lines  23-JUL-1992 08:39
--------------------------------------------------------------------------------
                     -< direct ftp access is possible!!! >-

    Friends,


    we have DIRECT FTP ACCESS TO THE WORLD!!!

    I found the following information in the VTX corporate database (search
    via keyword USS). The info was in the UNIX sales update 6/19/92 and
    marked <digital internal use only>. As this is very interesting and it
    works (yes, I tried it with success) I extracted the relevant parts and
    post them here.

    Anyway I wonder how that conforms with our internal security standards
    (specially the part related to incoming access!!). But as the VTX info
    is generally available I think this is sort of 'documented' and thus
    legal to know (and use?)...


    ---markus---


UNIX* Sales Support Weekly Update - 6/19/92

[...text deleted...]

 Section 8 - Autologin via telnet or rlogin
 
  Subject: Re: Autologin via telnet or rlogin
 
  I'm interested in your comment
  
  You can ftp it from ftp.uu.net in the /languages directory.
  
  Can you actually ftp to the "outside" world?  Everytime we try, we get
  a "host unreachable".  I suspect that screend is running on gatekeeper
  or whereever.
 
  I received the preceeding response asking about ftp from inside DEC.  It
  occurred to me that not everyone is familiar with this, so I am posting it
  again. 
 
  It is a valuable tool.  If you know about this already, feel free to delete
  this message now.
 
  The ability to do this was made possible by software from Marcus Ranum of the
  Washington DC URC and his participation with EXARC.
 
  Everyone in the company who has IP can ftp *into* dec.
 
  ftp to port 1555 on gatekeeper.dec.com or crl.dec.com and follow the
  instructions.  I'm pretty sure this is documented in decwrl::gatekeeper.doc.
 
  Allen Leibowitz
  Here is an example:
 
  Script started on Thu Jun 18 08:45:15 1992
  kwan.det.dec.com> ftp gatekeeper.dec.com 1555
  Connected to gatekeeper.dec.com.
  220-FTP passthrough server (V1.0mjr)
  220-To connect to a remote FTP server give your login as:
                       FOR DIGITAL INTERNAL USE ONLY
  [email protected] (EG: [email protected])
  220-
  220-Prior to FTPing through the gateway, please conserve valuable network
  220-bandwidth if possible by checking on gatekeeper.dec.com (DECWRL::) for
  220-any publically available FTP archives.
  220-
  220-If using Digital Pathways cryptokeys, authorize yourself by sending
  220-"authorize <username>" and respond to challenge using "response <##>"
  220-If your FTP client doesn't support authentication, use
  220-"quote authorize <username>" and "quote response <##>"
  220-If your connection is not authorize, you can still copy data inbound.
  220-
  220 Send bug reports to [email protected].
  Name (gatekeeper.dec.com:): [email protected]
  331 Guest login ok, send e-mail address as password.
  Password:
  230-
  230-                Welcome to the UUNET archive.
  230-   A service of UUNET Technologies Inc, Falls Church, Virginia
  230-   For information about UUNET, call +1 703 204 8000, or see the files
  230-   in /uunet-info
  230-
  230-   Access is allowed all day.  Local time is Thu Jun 18 08:47:47 1992.
  230-
  230-   All transfers are logged with your host name and email address.
  230-   If you don't like this policy, disconnect now!
  230-
  230-   If your FTP client crashes or hangs shortly after login, try using a
  230-   dash (-) as the first character of your password.  This will turn off
  230-   the informational messages which may be confusing your ftp client.
  230-
  230-Please read the file /info/README.ftp
  230-  it was last modified on Thu Jun  4 02:13:26 1992 - 14 days ago
  230-Please read the file /info/README
  230-  it was last modified on Tue Mar 10 02:26:39 1992 - 100 days ago
  230-Please read the file /index/README
  230-  it was last modified on Fri May 29 06:24:22 1992 - 20 days ago
  230 Guest login ok, access restrictions apply.
  Remote system type is UNIX.
  Using binary mode to transfer files.
  ftp> cd /languages
  250 CWD command successful.
  ftp> ls
  200 PORT command successful.
  150 Opening ASCII mode data connection for /bin/ls.
  total 33
  -rw-r--r--   1 50       21             80 Jan 13 15:43 .where
  drwxr-xr-x   3 3        21            512 Jun 18 03:45 abc
  drwxr-xr-x   4 3        21            512 Apr  9 17:41 eli
  drwxr-xr-x  12 3        21            512 Jun 18 03:48 elisp
  drwxrwxr-x   2 50       21            512 May 13 21:38 forth
  drwxr-xr-x   5 3        21            512 Apr 23 23:37 icon
  drwxrwxr-x  11 7        21            512 May 29 09:57 lisp
  -rw-r--r--   1 3        21          20837 Jun 18 07:14 ls-lR.Z
  drwxr-xr-x   2 50       21            512 Jun  4 02:04 misc
  drwxr-xr-x   6 3        21            512 Jun 12 20:04 perl
  drwxrwxr-x   3 50       21            512 Aug 15  1991 prolog
  drwxrwxr-x   4 3        21           1024 Jun 10 18:13 tcl
  drwxrwxr-x   2 50       21            512 Oct 21  1991 txl
  226 Transfer complete.
  ftp> quit
  221 Goodbye.
  kwan.det.dec.com> 
  script done on Thu Jun 18 08:46:08 1992