Re: Branches down. Any ideas?

[Sean Porterfield <sporter@xxxxxxxxxxxx>]

On this particular box, the QAUTOCFG has always been 1.  I really don't
like that (for just this reason) and changed it to 0.

Chuck Lewis wrote:
> 
> Righto Al,
> 
> I didn't spell that out but "assumed" that anyone changing it from off to on 
>would
> change it back and I probably shouldn't have assumed that :-)
> 
> Chuck
> 
> MacWheel99@aol.com wrote:
> 
> > >  From:    clewis@iquest.net (Chuck Lewis)
> >
> > > Make sure system value QAUTOCFG (Autoconfigure devices) is set to on
> > > (1) - if you normally have this set to 0 (off). Then pick one of the
> > devices
> > > that is Vary on pending and do a RTVCFGSRC into a CL and compile it
> > > (that way you don't loose any settings) and then delete the device.
> > > Then have someone on the remote end turn that device
> > > OFF for about 30 seconds and then turn it back on.
> > > Check

I don't think that would work in out situation.  The local (to the 400)
router actually emulates a 5494 and creates the devices even if the
remote controller isn't there.  Turning the terminal off has no effect
on this part.


> > After you get the whole problem resolved & the mess is history, you might
> > want to rethink your SYSVAL ... as I recall there was a security problem
> > leaving some auto configure options on when you not working with adding
> > removing devices ... a hacker could join your network with infinite tries at
> > passwords ... I can dig up the reference if anyone interested.


I don't know of any security problem with QAUTOCFG, but if the attacker
has lan access, the QAUTOVRT SYSVAL would apply.  There is no Internet
access to the 400 in question, so someone would have to have physical
access to the LAN.
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---