Re: Okay to change QAUTOVRT to zero?

["M. Lazarus" <mlazarus@xxxxxxxx>]

Jim,

At 10/18/00 08:13 AM -0700, you wrote:
>QAUTOVRT and security.
>
>The way to use QAUTOVRT with security in mind is to initially turn it on and
>allow a number of devices to be created.  After enough auto devices get 
>created
>you turn it off.  You now have enough virtual devices for everyone to get onto
>your system that needs too, but no more will be created when someone comes 
>along
>and starts disabling them trying to hack into your system.

  IMHO, that's more trouble than it's worth.  I don't think it's a good 
method to use for security purposes.  Let's say you have a legitimate need 
for 100 virtual devices (I think that's a *very* conservative number).  If 
you have password retries set to 3 you're allowing 300 tries for a 
hacker.  Not very helpful, security wise.

  OTOH, during high demand periods, if 100 is not enough, a legitimate user 
will be locked out.

  -mark

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---