1 INFO-VAX	Fri, 13 Jun 2003	Volume 2003 : Issue 326       Contents: Re: Alpha Servers $ Cluster unusable by SMBD port scans?( Re: Cluster unusable by SMBD port scans?( Re: Cluster unusable by SMBD port scans?( Re: Cluster unusable by SMBD port scans?" Re: Dell to make Itanium 2 systems7 Re: Download service for VMS and Tru64 layered products 7 Re: Download service for VMS and Tru64 layered products  RE: Forcing ip Re: Forcing ip Re: Forcing ip RE: Forcing ip- Re: How to configure Batch Queues for cluster - Re: How to configure Batch Queues for cluster " Re: HP #1 in Servers and Notebooks Re: HP #1 in Storage Re: HP #1 in Storage! Re: HSZ80 / ES40 cabling question - Re: Knowledge of VMS tests for job candidates - Re: Knowledge of VMS tests for job candidates - Re: Knowledge of VMS tests for job candidates - Re: Knowledge of VMS tests for job candidates - Re: Knowledge of VMS tests for job candidates - Re: Knowledge of VMS tests for job candidates ) Re: Motif 1.3, Euro sign not standard ?!? ) Re: Motif 1.3, Euro sign not standard ?!? ) Re: Motif 1.3, Euro sign not standard ?!? . Re: OpenVMS Success Story: Partners HealthCare4 Re: Problems running a .com file using a Java socket4 Re: Problems running a .com file using a Java socket4 Re: Problems running a .com file using a Java socket Re: SET COMMUNICATION I SET COMMUNICATION (was: RE: Update: Cluster unusable by SMBD port scans?) M Re: SET COMMUNICATION (was: RE: Update: Cluster unusable by SMBD port scans?) P Re: SET COMMUNICATION (was: RE: Update: Cluster unusable by SMBD port scans?) sc Re: set service/separator , System Machine Check through vecter 00000660 TCP/IP Services startup  UCX : set service/separator , Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?0 Re: Update: Cluster unusable by SMBD port scans?. Upgrade1: Cluster unusable by SMBD port scans?2 Re: Upgrade1: Cluster unusable by SMBD port scans?3 VMS to Linux via NFS: remove of directory fails ... 7 Re: VMS to Linux via NFS: remove of directory fails ... 7 Re: VMS to Linux via NFS: remove of directory fails ... ! Re: where to get VAX 7730 system? ! Re: where to get VAX 7730 system? ! Re: where to get VAX 7730 system? ! Re: where to get VAX 7730 system? C Re: X expertise sought: intrinsic.h - XtSpecificationRelease 5 v. 6  [CDE V1.2-6] Keyboard locks up" Re: [CDE V1.2-6] Keyboard locks upP Re: [OT] Inquirer Article Origins - The Conspiracy Theories. (was Re:  Another f  F ----------------------------------------------------------------------  % Date: Fri, 13 Jun 2003 08:42:38 -0400 $ From: "rob kas" <news@paychoice.com> Subject: Re: Alpha Servers/ Message-ID: <veji6qst99hi66@corp.supernews.com>    " @ > When Compaq Canada, NASA and The US Military need Alpha stuff. > Who do they call?????????     +              "Alpha-Clusters !!!"    :) !!!        > 	 > Answer:  > Island Computers US Corp.  > 2700 Gregory St, Suite 180 > Savannah GA 31404  > Tel: 912 4476622 > Fax: 912 2010402 > http://www.islandco.com  > dbturner-at-hpaq.net! > (Change the -at- to @ to reply)  >  >    ------------------------------  % Date: Fri, 13 Jun 2003 09:04:18 +0200 2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>- Subject: Cluster unusable by SMBD port scans? 3 Message-ID: <3EE97772.8C81F2A9@ikp.tu-darmstadt.de>    Hi,   F I have 2 VMS systems in the cluster with Samba installed. From time to@ time I observed in my opcom messages port scans from outside ourE university net to that particular systems. The scanner tries one port G after the other and I obviously can do nothing to stop it. But this did  not affect the systems before.  D But since a few days it happened two times that login in the cluster> systems was impossible anymore. It turned out, that the commonC sysuaf.dat was accessed by a lot of processes like SMBD_BGxxx. This H obviously made the sysuaf unaccessible for other logins. I also found inD the log files Samba produces a lot of log.;xxxx and log.computernameF files with rather fantastic computernames except the right ones out of	 our area.   B I guess that these processes come from the port scans. Has someoneB observed a similar problem? What can be done against it? ModifyingG smbd_startup.com, how? Is there a possibility to restrict the number of  SMBD_* processes to a maximum?  # Thanks for any help or information.    Regards  Otto  ,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  % Date: Fri, 13 Jun 2003 11:42:58 +0100 * From: "Richard Brodie" <R.Brodie@rl.ac.uk>1 Subject: Re: Cluster unusable by SMBD port scans? + Message-ID: <bcc9rj$ltm@newton.cc.rl.ac.uk>   = "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de> wrote in message - news:3EE97772.8C81F2A9@ikp.tu-darmstadt.de...   H > I have 2 VMS systems in the cluster with Samba installed. From time toB > time I observed in my opcom messages port scans from outside ourG > university net to that particular systems. The scanner tries one port < > after the other and I obviously can do nothing to stop it.  J I find it surprising that your university net has open access to the ports@ used by Samba. I would check what your local arrangement are for firewalling.  H As for the address involved, it's hard to tell from the accounting logs.H The remote node address is only the low 16 bits, and the name truncated.I You can't unambiguously determine the IP address. The security log stores 8 a 32 bit number; it's worth checking that, if available.   ------------------------------  % Date: Fri, 13 Jun 2003 13:11:59 +0200 2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>1 Subject: Re: Cluster unusable by SMBD port scans? 3 Message-ID: <3EE9B17F.3F8DC356@ikp.tu-darmstadt.de>    Richard,   good remark:    ? > "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de> wrote in message / > news:3EE97772.8C81F2A9@ikp.tu-darmstadt.de...  > J > > I have 2 VMS systems in the cluster with Samba installed. From time toD > > time I observed in my opcom messages port scans from outside ourI > > university net to that particular systems. The scanner tries one port > > > after the other and I obviously can do nothing to stop it. > L > I find it surprising that your university net has open access to the portsB > used by Samba. I would check what your local arrangement are for > firewalling. > H That is a policy problem. Our university has no firewall to the outside,D at least they tell me that it is not possible to close ports used byC Samba. They want to sell us solutions with individual firewalls for F subnets and subdomains operated by the university computer center... IE totally agree with you that it makes no sense that the university net & has open access to Samba from outside.   Regards  Otto  ,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  # Date: Fri, 13 Jun 2003 16:52:10 GMT F From: lederman@star.enet.dec.DISABLE-JUNK-EMAIL.com (Bart Z. Lederman)1 Subject: Re: Cluster unusable by SMBD port scans? 1 Message-ID: <_inGa.2543$4Q3.514@news.cpqcorp.net>   > I think the scanning is a symptom of one of the 'worms' that's
 going around.   = If you're runinng TCPIP, you might want to add some filtering 6 to the SMBD service.  You can accept or reject network5 addresses outside of your local range.  For example,  ! in SAMBA_BIN:SMBD_SETUP_TCPIP.COM    $ tcpip set service smbd -*         /reject=message="suspected worm" -3         /reject=host=(16.32.248.69,16.32.248.198) - ,         /reject=network=(15.0.0.0:255.0.0.0)  7 You have to set these things before the SMBD service is  started.  7 This stops the attacks from taking up as many resources - on your system as the connection is rejected.    --  (  B. Z. Lederman   Personal Opinions Only  8  Posting to a News group does NOT give anyone permission8  to send me advertising by E-mail or put me on a mailing  list of any kind.  5  Please remove the "DISABLE-JUNK-EMAIL" if you have a 5  legitimate reason to E-mail a response to this post.    ------------------------------  # Date: Fri, 13 Jun 2003 15:41:13 GMT # From: "John Smith" <a@nonymous.com> + Subject: Re: Dell to make Itanium 2 systems G Message-ID: <tgmGa.77355$G_.10944@news02.bloor.is.net.cable.rogers.com>   8 "Rob Young" <young_r@encompasserve.org> wrote in message- news:93pD0Xsfrjnt@eisner.encompasserve.org... B > In article <5de62812d6b61ab69bb4dee455908b09@free.teranews.com>,* David Harrold <DHarrold@wi.rr.com> writes:; > > On Mon, 09 Jun 2003 20:32:53 -0500, "David J. Dachtera" " > > <djesys.nospam@fsi.net> wrote: > >  > >>Keith Parris wrote:  > >>> [snip]@ > >>> A quick Google search confirms that indeed, starting about	 September @ > >>> 2002, Dell started telling customers that it plans to ship	 Itanium 2  > >>> systems in 2003. > >>6 > >>I wonder how many of them will be OpenVMS-capable? > > < > > Well, I recall someone (Fred and Hoff, I think) that the engineering team is F > > not doing anything intentional to cause VMS to not work on generic Itanium  > > systems. > > A > > But, who cares?  Are you really going to buy a Dell Itanium 2 
 system to run   > > your production environment? > >  > @ > Sure.  The premise is that VMS is VMS.  VMS with a world-class
 > filesystem.  >  > As an example... > 5 > I'm justifying another node simply on cost savings.  > E > 4 VMS Dells in the cluster?  Drop hardware support to next business  day.A > Server dies, no sweat.  Now the assumption here is you have the B > throughput with 3 servers, so this doesn't meet everyone's need. > ? > So in a sense, if Dell is a flakier platform than HP or IBM , ; > whatever.  I don't care as if one drops off I have enough  horsepower.  > ? > [I'm arguing from the point:  "why not?"  Some will leave the A > fold for Dell.  Many will stay with VMS on HP kit as there is a @ > comfort and support level there.  Maybe as things work out, we@ > stuff a Dell or two in our ItaniumVMS cluster when dollars get > tight on a budget cycle.]  > C > This concept must be feeding back into HP and IBM's thinking, and ; > we see it.  Hence, the shift to services as the edge with = > servers becomes further devaluaed with commodity IA64 being @ > the platform of choice OR forcing HP/IBM to come close to DellD > in pricing.  The shakeout on the desktop is what will be happening  > to 4, 8, 16 CPU space on IA64. > F > Now maybe HP locks in NSK, VMS to HP kit.  That would be unfortunateC > but not terrible.  I'm assuming the HP kit will be close to price @ > of Dell.  If it isn't, HP won't be selling much Itanium in theA > Win64 or Linux space.  They probably won't dare bifurcate their > > IA64 line into "Enterprise class" NSK, VMS price models with@ > crippled firmware and the same hardware selling into "Industry> > Standard" Win64, Linux space.  That strategy is fraught with@ > peril and a very HOSTILE user base.  "How do I tell management; > that same box costs quite a bit more running VMS?" , etc.     D I'm not sure HP cares about your "How do I tell management that same1 box costs quite a bit more running VMS?" dilemma.   B They look at VMS customers as 'locked-in' to a great extent by theE high cost of porting / disrupting production / potential flakiness in F environments. So they are betting that you won't move from HP hardwareC even at higher-than-Dell prices. And HP may well be correct in that A thinking .... for a while. But sooner or later, as you say, 'good # enough' will trump having the best.   > It comes down to the old saying, "Some people know the cost ofA everything and the value of nothing." Unfortunately in the age of C bean-counters, the cost of everything is the driving force. And the B bean-counters are in control more than the value experts - look atB NASA and the shuttle, the horrors being committed in the educationE systems, look at all the VMS customers bolting for unix/Linux, and so  on.    ------------------------------  % Date: Fri, 13 Jun 2003 06:27:57 -0400 2 From: rdeininger@mindspring.com (Robert Deininger)@ Subject: Re: Download service for VMS and Tru64 layered productsL Message-ID: <rdeininger-1306030627570001@user-uinj4f1.dialup.mindspring.com>  = In article <f883d5a4.0306121146.1bec3232@posting.google.com>, , seanobanion@attbi.com (Sean O'Banion) wrote:   >Warren, > A >I have confirmed that this now works for us with Mozilla on VMS.  >  >Thank you all very much!  > / >Sometimes, whining in public does work ... :-)   J Or maybe it was the whining in private, through normal channels.  We don't3 know how much of that there was over this screw-up.    ------------------------------  % Date: Fri, 13 Jun 2003 11:41:13 -0400 , From: "warren sander" <warren.sander@hp.com>@ Subject: Re: Download service for VMS and Tru64 layered products* Message-ID: <3ee9f4f3@usenet01.boi.hp.com>  I I'm just the messenger. there were a number of folks that worked to first  get the online distribution 0 and then to fix the online distribution service.  / "JF Mezei" <jfmezei@istop.com> wrote in message # news:3EE7A6CD.3C138ED2@istop.com...  > warren sander wrote:K > > As a result of the feedback from comp.os.vms they have decided to allow  FTP  > > access to the kits. ) > > see sometimes we do listen and act...  >  > K > Sue, can you make sure Mr Sander get a big chocolate cookie ? He deserves  one  > (or more). >  > Good job.  > H > Now, if you could move that stuff out of a microsoft server and onto a moreI > serious server, it would give a better image to the service. Somehow, I  never 3 > trust files I obtain from some wintel server. :-)    ------------------------------    Date: 13 Jun 2003 08:04:04 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler)  Subject: RE: Forcing ip 3 Message-ID: <xFyrjCJR47fd@eisner.encompasserve.org>   e In article <HPEIIECLKCPLCKBAFNLGOEOJCAAA.mmabey@cenhud.com>, "Mike Mabey" <mmabey@cenhud.com> writes:  > H > I said "not DECNET over ip" because when I substitute "IP$x.x.x.x" for@ > "VAXNODE" the OPEN fails (so does "set host" from a terminal.)L > I know my end is set up for DECNET over ip since I can connect to my otherI > cluster this way. The other company's VAX, which I can set host to on a M > "look but don't touch" basis, is running the Wollengong stack which I'm not L > very familiar with. Its STARTINET.COM does contain a call to load the PWIPK > driver. Is anything else required at that end for DECNET over ip to work?  >   G    We had Wollongong for a while.  IIRC it does not support DECnet over C    IP.  You would have to get them to change the IP stack, or add a C    third system at their end that can do the DECnet-over-IP to just     plain DECnet transition.   C    OBTW, we were doing DECnet task access like you're doing on one  B    VAXcluster while we were setting up the Wollongong IP stack on F    another VAXcluster.  Deja vu.  The DECnet task system fired off allF    required processing when we sent the file to the task.  The IP guysH    settled for a polling process that would watch for the incoming file.   ------------------------------  % Date: Fri, 13 Jun 2003 01:29:30 -0400   From: John Santos <JOHN@egh.com> Subject: Re: Forcing ip 5 Message-ID: <1030613010833.2835C-100000@Ives.egh.com>   $ On Thu, 12 Jun 2003, JF Mezei wrote:   > Mike Mabey wrote: N > > I know my end is set up for DECNET over ip since I can connect to my otherK > > cluster this way. The other company's VAX, which I can set host to on a A > > "look but don't touch" basis, is running the Wollengong stack  >  > L > I am not sure that DECNET-over-IP is compatible between stacks. Can anyoneO > conform this ? (*eg: DECNET5 with TCPIP services, interoperating with DECNET5  > with Wollongong or Multinet ?   G DECNET5 with TCPIP talks just fine with DECNET5 with TCPWARE.  However, C Wollongong went away several years ago.  I don't know if it worked. F (We had one customer site with Wollongong (actually two customers withE 2 sites who merged...), but they converted to TCPWare when Wollongong D dropped out of the VMS TCP stack business, and Process offered theirF customers a swap to either TCPWare or Multinet if they signed a 1-yearC support contract.  I think I still have the Wollongong docs around, 
 if needed...)   G Various TCP stacks have DECnet-over-IP that works as a virtual DECnet-4 F circuit.  I am pretty sure these are *not* compatible with each other.% They are also obsolete with DECnet-5.   C DECnet-5 uses the PWIP driver, which is needed for Pathworks, so if F the IP stack supports Pathworks, it probably will work with DECnet-5's DECnet-over-IP.   G Mike: Which version of DECnet are you using?  Which IP stack?  (I think ' you said UCX/TCPIP but it got snipped.)   L > I think you may want to look at it from a business/management perspective.N > Cutting off the DECNET connection at the firewall may end up costing you andK > your peer more money to rebuild your application  than just paying to get  > decnet support in the router.  > P > Is your DECNET peer at the other end willing to spend money to also change hisO > application ? Does he deal with others who are also runing DECNET or just you @ > ? Is he feeling pressure at his end to also convert to TCPIP ? >  >    --   John Santos  Evans Griffiths & Hart, Inc. 781-861-0670 ext 539   ------------------------------   Date: 13 Jun 2003 10:38 CDT ' From: carl@gerg.tamu.edu (Carl Perkins)  Subject: Re: Forcing ip - Message-ID: <13JUN200310381077@gerg.tamu.edu>   & JF Mezei <jfmezei@istop.com> writes... }David Froble wrote:O }> Ok, as Bob mentioned, use socket communications, with certificates, SSL, and 	 }> such.   } O }Out of curiosity, what is the basic way of using SSL for outbound calls ? Does K }your process connect to the remote node, or does it connect to a local SSL N }server and ask it to connect to the remote SSL pier, telling it to connect to }the remote process ?   B There is no single SSL server that manages everything on a system.  G The client connects directly. It is done using calls to the SSL library G instead of (or in addition to) the normal socket library to get all the I encryption taken care of. Likewise, the server end is done by each server # individually via SSL library calls.    --- Carl   ------------------------------  % Date: Fri, 13 Jun 2003 13:00:10 -0400 & From: "Mike Mabey" <mmabey@cenhud.com> Subject: RE: Forcing ip < Message-ID: <HPEIIECLKCPLCKBAFNLGOEPPCAAA.mmabey@cenhud.com>   > -----Original Message-----) > From: John Santos [mailto:JOHN@egh.com] % > Sent: Friday, June 13, 2003 1:30 AM  > To: Info-VAX@Mvb.Saic.Com  > Subject: Re: Forcing ip  >  > 	 <--SNIP-> D > > I am not sure that DECNET-over-IP is compatible between stacks.  > Can anyone6 > > conform this ? (*eg: DECNET5 with TCPIP services,  > interoperating with DECNET5 ! > > with Wollongong or Multinet ?  > I > DECNET5 with TCPIP talks just fine with DECNET5 with TCPWARE.  However, E > Wollongong went away several years ago.  I don't know if it worked. H > (We had one customer site with Wollongong (actually two customers withG > 2 sites who merged...), but they converted to TCPWare when Wollongong F > dropped out of the VMS TCP stack business, and Process offered theirH > customers a swap to either TCPWare or Multinet if they signed a 1-yearE > support contract.  I think I still have the Wollongong docs around,  > if needed...)  > I > Various TCP stacks have DECnet-over-IP that works as a virtual DECnet-4 H > circuit.  I am pretty sure these are *not* compatible with each other.' > They are also obsolete with DECnet-5.  > E > DECnet-5 uses the PWIP driver, which is needed for Pathworks, so if H > the IP stack supports Pathworks, it probably will work with DECnet-5's > DECnet-over-IP.  > I > Mike: Which version of DECnet are you using?  Which IP stack?  (I think ) > you said UCX/TCPIP but it got snipped.)  > 	 <--SNIP->  > --  
 > John Santos  > Evans Griffiths & Hart, Inc. > 781-861-0670 ext 539 >    My Alpha: OpenVMS V7.3-1& Info from "MC NCL SHOW IMPLEMENTATION"( 	Name = Compaq DECnet-Plus for OpenVMS ,+ 	Version = "V7.3-1 22-MAY-2002 22:50:22.40"  and from "MC NCL SHOW VERSION"+ 	Version                           = T5.0.3  Info from "MC NCP SHOW NODE"2 	Identification           = DECnet-OSI for OpenVMS and "UCX SHOW VERSION"> 	Compaq TCP/IP Services for OpenVMS Alpha Version V5.3 - ECO 2     Their VAX: OpenVMS V6.2  Info from "MC NCP SHOW NODE"7 	Identification           = DECnet for OpenVMS VAX V6.1   2 Not sure how to determine version of Wollengong...   ------------------------------  % Date: Fri, 13 Jun 2003 11:04:38 -0400 % From: "John Vottero" <John@mvpsi.com> 6 Subject: Re: How to configure Batch Queues for cluster/ Message-ID: <vejq09e4ahbke4@news.supernews.com>   < "David J. Dachtera" <djesys.nospam@fsi.net> wrote in message! news:3EE92CA4.E1B439A3@fsi.net...  [snip] > J > You could do this in your SYSTARTUP_VMS.COM procedure in the SYS$MANAGER > path:  > F > $ INIT/QUE/BATCH SYS$BATCH/GENERIC=(SYS$BATCH_node1,SYS$BATCH_node2) > $ NODE = F$GETSYI("NODENAME") / > $ INIT/QUE/BATCH SYS$BATCH_'NODE'/JOB_LIMIT=4  >   K You don't have to put INIT/QUE commands in SYSSTARTUP_VMS.COM.  INIT/QUE is I a one time command (unless you want to make changes).  The only thing you D have to do at startup is start the queue or enable autostart queues.   ------------------------------    Date: 13 Jun 2003 11:09:10 -0500 From: briggs@encompasserve.org6 Subject: Re: How to configure Batch Queues for cluster3 Message-ID: <rJ2W$Gs4prJ+@eisner.encompasserve.org>   W In article <vejq09e4ahbke4@news.supernews.com>, "John Vottero" <John@mvpsi.com> writes: > > "David J. Dachtera" <djesys.nospam@fsi.net> wrote in message# > news:3EE92CA4.E1B439A3@fsi.net...  > [snip] >>K >> You could do this in your SYSTARTUP_VMS.COM procedure in the SYS$MANAGER  >> path: >>G >> $ INIT/QUE/BATCH SYS$BATCH/GENERIC=(SYS$BATCH_node1,SYS$BATCH_node2)   >> $ NODE = F$GETSYI("NODENAME")0 >> $ INIT/QUE/BATCH SYS$BATCH_'NODE'/JOB_LIMIT=4 >> > M > You don't have to put INIT/QUE commands in SYSSTARTUP_VMS.COM.  INIT/QUE is K > a one time command (unless you want to make changes).  The only thing you F > have to do at startup is start the queue or enable autostart queues.   Absolutely true.  C But if your queue mangler database has a habit of blowing itself to ? smithereens or if you restore the queue database from an online F backup (/IGNORE=INTERLOCK) and thus blow it away yourself, it is handyE to be able to recreate your queues and handier still if they recreate  themselves.   ( At least that was my reasoning for using  $ $ INIT /QUEUE blah blah blah /START   
 instead of   $ START /QUEUE blah blah blah    or     $ ENABLE AUTOSTART /QUEUES   in my startup procedures.    	John Briggs   ------------------------------    Date: 13 Jun 2003 08:17:59 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) + Subject: Re: HP #1 in Servers and Notebooks 3 Message-ID: <jvDTh6Sg9YzM@eisner.encompasserve.org>   p In article <cf15391e.0306121620.52135d9@posting.google.com>, keithparris_NOSPAM@yahoo.com (Keith Parris) writes: > G > And Compaq has not been "eliminated".  When I go to CompUSA, BestBuy, H > or Circuit City, I see Compaq and HP PCs in about equal numbers.  It'sD > also encouraging to see PCs from HP priced the same or even better > than PCs from eMachines.  F    We still get ads with "HP" on one page and "HP Compaq" on the next.   ------------------------------  % Date: Fri, 13 Jun 2003 02:20:44 -0400 * From: "Bill Todd" <billtodd@metrocast.net> Subject: Re: HP #1 in Storage 2 Message-ID: <qeednUp0fs-E8HSjXTWcow@metrocast.net>  > "Keith Parris" <keithparris_NOSPAM@yahoo.com> wrote in message7 news:cf15391e.0306121548.682fb980@posting.google.com... A > IDC Quarterly Report Affirms HP's No. 1 Position in Key Storage  > Categories > E > HP extended its lead over competitors in total disk storage systems  > factory revenue   J An interesting interpretation of the IDC report, if what IDC itself has to say about it is any indication:   ? http://www.idc.com/getdoc.jhtml?containerId=pr2003_06_05_151042   H "In the first quarter, HP led the total disk storage system market, withI 26.3% revenue share, followed by IBM and EMC with 19.1% and 11.7% revenue L share, respectively. Dell and IBM posted the strongest year-over-year growthF during the first quarter among the top 5 vendors, with 37.5% and 16.8% respectively."  G So how did HP 'extend its lead', exactly?  I guess it extended the time I period during which it has occupied the lead position, but examination of C the chart which IDC includes in the above article indicates that it J certainly has has far less of a lead over up-and-comers IBM and Dell in Q1E 2003 than it had in Q1 2002 - a conclusion echoed in another article:   2 http://www.techweb.com/wire/story/TWB20030606S0005  F "Overall, Hewlett-Packard retained its top spot as the world's biggestE seller of disk storage systems by grabbing 26.3 percent of the global G market. But it's losing share according to IDC's numbers -- down almost 1 seven percent -- to companies like Dell and IBM."   G You might be tempted to say, "Well, at least HP increased its lead over J *some* competitors" (perhaps EMC and Sun, for example), but even that is aK bit difficult to support, since for every competitor listed in the chart HP L had a larger market-share-percentage lead in Q1 2002 than it had in Q1 2003.  0  and held the No. 1 position in other major diskA > storage markets during the first quarter of calendar year 2003, 0 > according to a report issued June 6 by IDC.[1] > F > Overall, HP built its lead in worldwide disk storage systems factory0 > revenue quarter-over-quarter with 26.3 percent  L There's that creative phrasing again:  HP 'built its lead' by - reducing it?L Or perhaps the 'quarter-over-quarter' indicates that in this particular caseF they're comparing Q1 with the preceding Q4 (but don't they usually sayJ 'sequentially' in that case?) and those numbers (which aren't mentioned inI the article I cited above) look a bit better than those in the IDC chart?    Inquiring minds want to know.    - bill  K P.S.  If you want to see the corresponding IDC chart and article for server  numbers, they're here:  ? http://www.idc.com/getdoc.jhtml?containerId=pr2003_05_29_165617    ------------------------------  # Date: Fri, 13 Jun 2003 14:38:15 GMT # From: "John Smith" <a@nonymous.com>  Subject: Re: HP #1 in Storage G Message-ID: <rllGa.75417$G_.23255@news02.bloor.is.net.cable.rogers.com>   5 "Bill Todd" <billtodd@metrocast.net> wrote in message , news:qeednUp0fs-E8HSjXTWcow@metrocast.net... > @ > "Keith Parris" <keithparris_NOSPAM@yahoo.com> wrote in message9 > news:cf15391e.0306121548.682fb980@posting.google.com... C > > IDC Quarterly Report Affirms HP's No. 1 Position in Key Storage  > > Categories > > ? > > HP extended its lead over competitors in total disk storage  systems  > > factory revenue  > E > An interesting interpretation of the IDC report, if what IDC itself  has to! > say about it is any indication:  > A > http://www.idc.com/getdoc.jhtml?containerId=pr2003_06_05_151042  > E > "In the first quarter, HP led the total disk storage system market,  withC > 26.3% revenue share, followed by IBM and EMC with 19.1% and 11.7%  revenue 8 > share, respectively. Dell and IBM posted the strongest year-over-year growth B > during the first quarter among the top 5 vendors, with 37.5% and 16.8%  > respectively." > D > So how did HP 'extend its lead', exactly?  I guess it extended the time< > period during which it has occupied the lead position, but examination ofE > the chart which IDC includes in the above article indicates that it F > certainly has has far less of a lead over up-and-comers IBM and Dell in Q1 > > 2003 than it had in Q1 2002 - a conclusion echoed in another article: > 4 > http://www.techweb.com/wire/story/TWB20030606S0005 > @ > "Overall, Hewlett-Packard retained its top spot as the world's biggest @ > seller of disk storage systems by grabbing 26.3 percent of the globalB > market. But it's losing share according to IDC's numbers -- down almost3 > seven percent -- to companies like Dell and IBM."  > D > You might be tempted to say, "Well, at least HP increased its lead overB > *some* competitors" (perhaps EMC and Sun, for example), but even	 that is a D > bit difficult to support, since for every competitor listed in the chart HPE > had a larger market-share-percentage lead in Q1 2002 than it had in  Q1 2003. > 2 >  and held the No. 1 position in other major diskC > > storage markets during the first quarter of calendar year 2003, 2 > > according to a report issued June 6 by IDC.[1] > > @ > > Overall, HP built its lead in worldwide disk storage systems factory 2 > > revenue quarter-over-quarter with 26.3 percent > A > There's that creative phrasing again:  HP 'built its lead' by -  reducing it?> > Or perhaps the 'quarter-over-quarter' indicates that in this particular case D > they're comparing Q1 with the preceding Q4 (but don't they usually say ? > 'sequentially' in that case?) and those numbers (which aren't  mentioned inD > the article I cited above) look a bit better than those in the IDC chart? >  > Inquiring minds want to know.     ? Sometimes losing less than your competitors is classified as an  improvement.   ------------------------------    Date: 13 Jun 2003 06:51:21 -0700- From: soccer13player@yahoo.com (Nom de Plume) * Subject: Re: HSZ80 / ES40 cabling question= Message-ID: <f401eb7f.0306130551.58f2501c@posting.google.com>   8 We tore down a configuration like this about a year ago.  < IIRC, each ESA12000 cabinet had dual HSZ80s configured to beD redundant.  Each ES40 had two SCSI cards.  Through Y type cables twoC ES40's, four SCSI cards total, were connected to both controllers.  C This allowed us to have direct access to each ESA12000 cabinet from C two servers.  So, if a server, HSZ controller, or SCSI card died we $ would still have access to our data.  A We then replicated the two ES40 and two ESA12000 environment at a B second site.  We used FDDI for our cluster traffic between the twoE sites and used HBVS to replicate the data.  We used unbalanced voting ; weighed towards our primary production site.  A nice little  configuration.  B With a quorum node at a third site, we would not have had to worryF about cluster votes and adjusting quorum in the event the primary site went south.    ------------------------------  % Date: Fri, 13 Jun 2003 00:01:02 -0700 " From: GreyCloud <cumulus@mist.com>6 Subject: Re: Knowledge of VMS tests for job candidates( Message-ID: <3EE976AE.93D22CEB@mist.com>  
 leslie wrote:  > + > Bob Ceculski (bob@instantwhip.com) wrote: A > : texascheryl@hotmail.com (Cheryl Hoefelmeyer) wrote in message = > : news:<7112dd15.0306111645.7db403ad@posting.google.com>... J > : > Does anyone out there have any exams to administer to job candidatesL > : > to see if they do, if fact, know anything at all about VMS, and if so,L > : > are you willing to send me a copy? We are interviewing candidates, andL > : > we really need to weed out the people who are not truthful about their@ > : > knowledge before any actual interview. Please send text to% > : > cheryl.hoefelmeyer@premera.com.  > : > 
 > : > Thanks!  > : > Cheryl > : D > : why not contact their former employers?  There is no single test@ > : to verify vms skills. i.e. there are "3" I/P stacks for VMS,D > : "2" versions of decnet, and a host of languages ... why not justF > : call the former employers, and then hire on a simple trial period?C > : You will find out on their first assignment if they can cut it!  > :  > E > Most former employers will only provide the dates a former employee  > worked for them. > F > Any negative information provided by former employers can be grounds > for a lawsuit.  9 Out of curiosity, what do you know in regards to homeland 8 security people doing background checks on people??  The9 reason I ask is that just about every federal worker thatD9 isn't squeaky clean are being fired for small things like ; speeding tickets, going back almost 20 years, etc.  I sensea5 that something very wrong is going on and may lead toS6 something more sinister in the works for this country.8 At this point I wouldn't recommend anyone applying for a federal job.   ------------------------------  # Date: Fri, 13 Jun 2003 07:14:08 GMTn+ From: LESLIE@JRLVAX.HOUSTON.RR.COM (leslie) 6 Subject: Re: Knowledge of VMS tests for job candidates: Message-ID: <4ReGa.10090$rb4.896839@twister.austin.rr.com>  # GreyCloud (cumulus@mist.com) wrote:e : leslie wrote:S : > - : > Bob Ceculski (bob@instantwhip.com) wrote:sC : > : texascheryl@hotmail.com (Cheryl Hoefelmeyer) wrote in message ? : > : news:<7112dd15.0306111645.7db403ad@posting.google.com>...rL : > : > Does anyone out there have any exams to administer to job candidatesN : > : > to see if they do, if fact, know anything at all about VMS, and if so,N : > : > are you willing to send me a copy? We are interviewing candidates, andN : > : > we really need to weed out the people who are not truthful about theirB : > : > knowledge before any actual interview. Please send text to' : > : > cheryl.hoefelmeyer@premera.com.  : > : >N : > : > Thanks!  : > : > Cheryl : > :eF : > : why not contact their former employers?  There is no single testB : > : to verify vms skills. i.e. there are "3" I/P stacks for VMS,F : > : "2" versions of decnet, and a host of languages ... why not justH : > : call the former employers, and then hire on a simple trial period?E : > : You will find out on their first assignment if they can cut it!b : > :M : > G : > Most former employers will only provide the dates a former employeel : > worked for them. : > H : > Any negative information provided by former employers can be grounds : > for a lawsuit. : ; : Out of curiosity, what do you know in regards to homelande7 : security people doing background checks on people??  e  	 Nothing. s  ? : The reason I ask is that just about every federal worker thatc; : isn't squeaky clean are being fired for small things like 6 : speeding tickets, going back almost 20 years, etc.    2 Do you have a link to an example of such firings ?  ? : I sense that something very wrong is going on and may lead too8 : something more sinister in the works for this country.: : At this point I wouldn't recommend anyone applying for a : federal job. :   @ An administration capable of Patriot Act II needs to be watched:  )    http://makeashorterlink.com/?I2AB11583K4    Even in Wartime, Stealth and Democracy Do Not Mix  % The original URL, wrapped to 2 lines:r  4    http://www.publicintegrity.org/dtaweb/report.asp?*    ReportID=506&L1=10&L2=10&L3=0&L4=0&L5=04    Even in Wartime, Stealth and Democracy Do Not Mix  E   "WASHINGTON, Feb. 12, 2003 -- A few days ago, the Center for Publics?    Integrity obtained a copy of draft legislation that the Bush I    Administration has quietly prepared as a bold, comprehensive sequel tosC    the USA Patriot Act. This proposed law would give the government 7    breathtaking new powers to further increase domestic:I    intelligence-gathering, surveillance and law enforcement prerogatives,-C    and simultaneously decrease judicial review and public access to-    information..."  % The scanned document is available at:r  L    http://www.publicintegrity.org/dtaweb/downloads/Story_01_020703_Doc_1.pdf  0    http://www.unknowncountry.com/journal/?id=117%    Whitley Strieber's Unknown CountryV  F   "..The bill also authorizes secret arrests. Never in the history of E    our country has such a thing been countenanced. It is a horrifying I    reminder of the way people used to disappear into the night and fog in I    Nazi Germany--but, as I point out below, it's actually even worse thanb6    the infamous 'Night and Fog' edict of the Nazis..."  , A review of German history by Thom Hartmann:  2    http://www.commondreams.org/views03/0316-08.htm1    When Democracy Failed: The Warnings of Historyi  D   "..February 27, 2003, was the 70th anniversary of Dutch terrorist J    Marinus van der Lubbe's successful firebombing of the German ParliamentD    (Reichstag) building, the terrorist act that catapulted Hitler toF    legitimacy and reshaped the German constitution. By the time of hisC    successful and brief action to seize Austria, in which almost noMH    German blood was shed, Hitler was the most beloved and popular leaderF    in the history of his nation. Hailed around the world, he was later%    Time magazine's "Man Of The Year."-  G    Most Americans remember his office for the security of the homeland, G    known as the Reichssicherheitshauptamt and its SchutzStaffel, simplya3    by its most famous agency's initials: the SS..."6    2 --Jerry Leslie   (my opinions are strictly my own)9   Note: leslie@jrlvax.houston.rr.com is invalid for email    ------------------------------  % Date: Fri, 13 Jun 2003 10:53:50 +0100R( From: Nic Clews <sendspamhere@127.0.0.1>6 Subject: Re: Knowledge of VMS tests for job candidates) Message-ID: <3EE99F2E.E973B728@127.0.0.1>i   GreyCloud wrote: >   ; > Out of curiosity, what do you know in regards to homeland : > security people doing background checks on people??  The; > reason I ask is that just about every federal worker thatv; > isn't squeaky clean are being fired for small things likep= > speeding tickets, going back almost 20 years, etc.  I sensei7 > that something very wrong is going on and may lead top8 > something more sinister in the works for this country.: > At this point I wouldn't recommend anyone applying for a > federal job.  F In the UK when having elevated clearance levels, yes things going backC multiple years, as well as financial, family history and some other G relationships are taken account of. This is before the positive vetting  level.  A Having past records would not necessarily prevent clearance being > granted, but failing to declare almost certainly will. It also
 "depends".  H There are also other clearance systems for those who work with "at risk"F people which are more concerned with your past record than your actualG character, but they are granted by a different organization. Relatively3
 clear cut.   -- p? Regards, Nic Clews a.k.a. Mr. CP Charges, CSC Computer Sciences  nclews at csc dot comr   ------------------------------  # Date: Fri, 13 Jun 2003 12:29:03 GMTi+ From: Jeff Cameron <JCam90502@jcameron.com> 6 Subject: Re: Knowledge of VMS tests for job candidates2 Message-ID: <BB0F119E.9932%JCam90502@jcameron.com>   On 6/11/03 5:45 PM, in articleE 7112dd15.0306111645.7db403ad@posting.google.com, "Cheryl Hoefelmeyer"k  <texascheryl@hotmail.com> wrote:  F > Does anyone out there have any exams to administer to job candidatesH > to see if they do, if fact, know anything at all about VMS, and if so,H > are you willing to send me a copy? We are interviewing candidates, andH > we really need to weed out the people who are not truthful about their< > knowledge before any actual interview. Please send text to! > cheryl.hoefelmeyer@premera.com.c > 	 > Thanks!o > Cheryl  L My Web pages on VMS has a System Manager's Quiz. It was intended for fun butE can separate the novices from the real VMS Admins. It is located at :a$ http://www.jcameron.com/vms/quiz.htm: Send me a personal email, and I will send you the answers,   Jeff Cameron   ------------------------------    Date: 13 Jun 2003 08:09:54 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler)d6 Subject: Re: Knowledge of VMS tests for job candidates3 Message-ID: <UthDiJoov8uH@eisner.encompasserve.org>   a In article <hl2Ga.9853$945.28725@tor-nn1.netcom.ca>, "Syltrem" <syltremzulu@videotron.ca> writes:t >> > A > Hummmm.. Cut-n-paste problem... So it's Windows fault again ;-)i  <    OK, that's a pass.  Even I have to use Windows sometimes.   ------------------------------    Date: 13 Jun 2003 08:15:31 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) 6 Subject: Re: Knowledge of VMS tests for job candidates3 Message-ID: <3jbfFnbtBl7y@eisner.encompasserve.org>w  M In article <3EE976AE.93D22CEB@mist.com>, GreyCloud <cumulus@mist.com> writes:i > ; > Out of curiosity, what do you know in regards to homelando: > security people doing background checks on people??  The; > reason I ask is that just about every federal worker that ; > isn't squeaky clean are being fired for small things liket5 > speeding tickets, going back almost 20 years, etc. n  F    In my experience that's a severe exageration.  What is happening isE    bad enough without making statements that cut credibility.  Do you-*    have a reference to support this claim?  F    The Bush administration has succeeded in uniting Americans in a wayH    it never intended.  Well known quite conservative figures are workingE    with the ACLU to protect our rights.  (reference:  Washington Post     6/13/03).   ------------------------------  + Date: Fri, 13 Jun 2003 13:15:32 +0200 (MET)f9 From: Phillip Helbig <HELBPHI@sysdev.deutsche-boerse.com>e2 Subject: Re: Motif 1.3, Euro sign not standard ?!?; Message-ID: <01KX1PJJ0TM4AM67GX@sysdev.deutsche-boerse.com>e  L > > Phillip has an additional "Content-Type: text/plain; charset=iso-8859-1"H > > header in his mail; the "currency" character is visible. You, Larry,I > > have no "Content-Type" header; the "currency" ist displayed as "=A4",d > > apparently the ASCII value.M > G >    I'm reading it via putty, and ANUNEWS, which displays it as "=A4".eA >    I believe is I was using a DECterm instead of putty it would E >    come out better (other characters have in the past), even thoughc  >    I'd still be using ANUNEWS.  G Of course, I'm reading in a DECterm as well.  I have to stop and think  / that not everyone---even in comp.os.vms---does.    ------------------------------  + Date: Fri, 13 Jun 2003 13:14:40 +0200 (MET)a9 From: Phillip Helbig <HELBPHI@sysdev.deutsche-boerse.com>t2 Subject: Re: Motif 1.3, Euro sign not standard ?!?; Message-ID: <01KX1PHQGRVQAM67GX@sysdev.deutsche-boerse.com>y   > >> Here it is: =A4 . > > H > > Are you perhaps presuming that everyone reads comp.os.vms with a web
 > > browser ?e > J > Phillip has an additional "Content-Type: text/plain; charset=iso-8859-1"F > header in his mail; the "currency" character is visible. You, Larry,G > have no "Content-Type" header; the "currency" ist displayed as "=A4",i > apparently the ASCII value.   C I sent it (via Info-VAX) from (what appears to be) vanilla VMS MAILw. (though the cluster is actually running PMDF).   ------------------------------  % Date: Fri, 13 Jun 2003 13:53:42 +0200 $ From: Michael Unger <unger@decus.de>2 Subject: Re: Motif 1.3, Euro sign not standard ?!?5 Message-ID: <bccggr$ha0dm$1@ID-152801.news.dfncis.de>e  + On 13-Jun-2003 13:14, Phillip Helbig wrote:M   >> >> Here it is: =A4 .n >> > gI >> > Are you perhaps presuming that everyone reads comp.os.vms with a web  >> > browser ? >>  K >> Phillip has an additional "Content-Type: text/plain; charset=iso-8859-1"oG >> header in his mail; the "currency" character is visible. You, Larry, H >> have no "Content-Type" header; the "currency" ist displayed as "=A4", >> apparently the ASCII value. > E > I sent it (via Info-VAX) from (what appears to be) vanilla VMS MAILi0 > (though the cluster is actually running PMDF).  G When I send plain ASCII text from my mail account at DECUS to one of myhG other mail accounts there is a "Content-Type" header too (the very same C as mentioned above) and, in addition, a "Content-Transfer-Encoding: H quoted-printable" header. As far as I know DECUS is also running vanilla' VMSmail (and TCPIP Services of course).   H I'm currently posting to this news group via an ISP and the DFN-CIS news' server (University of Berlin, Germany)./   Michaelf   -- s  @ Please do *not* send "Security Patch Notifications" or "SecurityA Updates"; this system isn't running a Micro$oft operating system.c= And don't annoy me <mailto:postmaster@[127.0.0.1]> please ;-)y   ------------------------------  % Date: Fri, 13 Jun 2003 11:50:42 -0400e, From: "warren sander" <warren.sander@hp.com>7 Subject: Re: OpenVMS Success Story: Partners HealthCarea* Message-ID: <3ee9f729@usenet01.boi.hp.com>  2 "Main, Kerry" <Kerry.Main@hp.com> wrote in messageL news:FD827B33AB0D9C4E92EACEEFEE2BA2FB058974@tayexc19.americas.cpqcorp.net...  C The new GS1280 / VMS V7.3-1 Bank of Austria testimonial can also beo	 found at:gD http://h71000.www7.hp.com/openvms/brochures/bank-austria/bankaus.pdf   and,G http://h71000.www7.hp.com/openvms/brochures/bank-austria/index.html forn those who want html...   -warrenc   -- MK ---------------------------------------------------------------------------i7 Warren Sander                   WW E-Marketing (HP.COM)1B Hewlett-Packard Company         Work:  warren.sander@remove.hp.comK 200 Forest Street MR01-3/K8     Personal: sander.ma.ultranet@remove.rcn.comw. Marlboro, MA 01752              (508) 467-48755    My opinions are my own and I only speak for myself-*          Read http://www.hp.com/go/openvmsK ---------------------------------------------------------------------------i   ------------------------------  % Date: Fri, 13 Jun 2003 10:17:19 +0200:! From: "Tim" <tim_a_b@hotmail.com> = Subject: Re: Problems running a .com file using a Java socketn. Message-ID: <vej1n3t090p93@corp.supernews.com>  4 "Don Sykes" <anonymous@pacbell.net> wrote in message% news:3EE8BFCD.964AE9BC@pacbell.net...s > E > My guess is it's a privilege problem. The server process you createeE > probably does not have sufficient privileges to start a gui window.CD > Suggestion: add a "show process/priv" to the script you create and2 > execute on VMS and report the results back here. >   J I changed my script as asked and the only difference in the output betweenJ the Java invoked script and the script I invoked at the command prompt was< between the Process IDs. The access privileges are the same.  A Here is the output from the script when invoked from within Java:   G 13-JUN-2003 08:58:23.82   User: IRIS             Process ID:   0000502E G                           Node: 1CIO5            Process name: "IRIS_5"-   Authorized privileges:.  MOUNT        NETMBX       TMPMBX       VOLPRO   Process privileges:v4  MOUNT                may execute mount acp function/  NETMBX               may create network device 2  TMPMBX               may create temporary mailbox4  VOLPRO               may override volume protection   Process rights:N+  IRIS                              resource.  INTERACTIVE  REMOTEh   System rights:  SYS$NODE_1CIO5o   Soft CPU Affinity: off  E And here is the output when I ran the script from the command prompt:s  G 13-JUN-2003 08:58:23.82   User: IRIS             Process ID:   0000011DoG                           Node: 1CIO5            Process name: "IRIS_5"    Authorized privileges:.  MOUNT        NETMBX       TMPMBX       VOLPRO   Process privileges:n4  MOUNT                may execute mount acp function/  NETMBX               may create network device 2  TMPMBX               may create temporary mailbox4  VOLPRO               may override volume protection   Process rights:e+  IRIS                              resource   INTERACTIVE  REMOTEi   System rights:  SYS$NODE_1CIO5C   Soft CPU Affinity: off   ------------------------------  % Date: Fri, 13 Jun 2003 11:50:43 +0200s! From: "Tim" <tim_a_b@hotmail.com>e= Subject: Re: Problems running a .com file using a Java sockets/ Message-ID: <vej767g0rf5ke7@corp.supernews.com>u  9 "Keith A. Lewis" <lewis@PROBE.mitre.org> wrote in message ( news:bcanp6$c0v$1@newslocal.mitre.org...  L > It's possible that you're missing the DECW$DISPLAY logical name (analogousJ > to the DISPLAY environment variable in Unix).  There are two ways to set it:m >   
 Thanks Keith,2  G Unfortunately I just checked and the DECW$DISPLAY logical is set and isoE still set when I run the Java program - I think it is because I put a      $ show log DECW$DISPLAYh) in the script that my Java program execs.'  L I have a feeling it may have something to do with the third-party script I'mL calling as it looks at PIDs etc. So I think I will try to test my program byK calling a standard GUI appliction. An example in the DISPLAY help mentioned 8 invoking 'clock' on another machine, so I will try that.  
 Kind Regards,A   Tim.   ------------------------------  % Date: Fri, 13 Jun 2003 14:30:37 +0200 ! From: "Tim" <tim_a_b@hotmail.com>l= Subject: Re: Problems running a .com file using a Java socketu/ Message-ID: <vejgi5jsq6jb50@corp.supernews.com>p  , "Tim" <tim_a_b@hotmail.com> wrote in message) news:vej767g0rf5ke7@corp.supernews.com...r  J > I have a feeling it may have something to do with the third-party script I'mvK > calling as it looks at PIDs etc. So I think I will try to test my programn byC > calling a standard GUI appliction. An example in the DISPLAY helpt	 mentionedo: > invoking 'clock' on another machine, so I will try that. >n  J Damn it! Ok, so I tried it with the clock program and it worked fine. So I7 have problems with the third party script I am calling.w  J Ah well, thankyou for your help Don and Keith, it is very much appreciated! and did teach me some new things.   
 Kind regards,t   Tim.   ------------------------------  + Date: Fri, 13 Jun 2003 14:53:51 +0100 (MET)s9 From: Phillip Helbig <HELBPHI@sysdev.deutsche-boerse.com>l Subject: Re: SET COMMUNICATION; Message-ID: <01KX1SZ1J5Y8AOKN0V@sysdev.deutsche-boerse.com>a   > ucx sh comm/sect > shows the reject networks.  5 Right, thanks.  Apparently, it shows /ACCEPT as well.o  F Still, I think that each SET command should have a corresponding SHOW  command and vice versa.    ------------------------------  + Date: Fri, 13 Jun 2003 13:09:20 +0100 (MET) 9 From: Phillip Helbig <HELBPHI@sysdev.deutsche-boerse.com>6R Subject: SET COMMUNICATION (was: RE: Update: Cluster unusable by SMBD port scans?); Message-ID: <01KX1PBE8X62AOKN0V@sysdev.deutsche-boerse.com>     > May be you should just issue a > $ tcpip set comm/reject=...@" > to stop the source annoying you.  F Wouldn't it be nice if SHOW COMMUNICATION showed what has been set by # SET COMMUNICATION?  Bug or feature?o   ------------------------------  # Date: Fri, 13 Jun 2003 12:02:11 GMT - From: "labadie" <tonari_no_tottoro@127.0.0.1>dV Subject: Re: SET COMMUNICATION (was: RE: Update: Cluster unusable by SMBD port scans?)2 Message-ID: <73jGa.2513$KD3.2408@news.cpqcorp.net>  F "Phillip Helbig" <HELBPHI@sysdev.deutsche-boerse.com> wrote in message5 news:01KX1PBE8X62AOKN0V@sysdev.deutsche-boerse.com...S" > > May be you should just issue a > > $ tcpip set comm/reject=...t$ > > to stop the source annoying you. > G > Wouldn't it be nice if SHOW COMMUNICATION showed what has been set byb% > SET COMMUNICATION?  Bug or feature?-   ucx sh comm/sec  shows the reject networks.   Grard   ------------------------------  % Date: Fri, 13 Jun 2003 16:02:30 +0200g2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>Y Subject: Re: SET COMMUNICATION (was: RE: Update: Cluster unusable by SMBD port scans?) scd3 Message-ID: <3EE9D976.F02407A2@ikp.tu-darmstadt.de>o   I had a similar problem with5 $ ucx set servi x /limit=n or /reject=network=a.b.c.dI1 because I didn't see it with $ ucx sh servi X /fu H but after restart of tcpip the changes showed up in $ ucx sh servi X /fu   Regards  Otto -- o,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  # Date: Fri, 13 Jun 2003 15:50:45 GMTP; From: "John Gemignani, Jr." <jon-nope@thiswontworkossc.net>p" Subject: Re: set service/separator< Message-ID: <ppmGa.4856$Jw6.3262672@news1.news.adelphia.net>  K It's used for the R* services (RLOGIN, RSH) to set the separator charactersEJ in the initial command stream which contains username, device type, speed,I password, etc (not in that order).  I personally could not understand why L the engineer did this in the first place, but as a side effect it would seemJ that you could create your own r* service by mimicing either the rlogin or
 rsh settings.t   -John   3 "Woland" <weiland@no.spam.post.cz> wrote in messageh) news:CFN37785604557581@news.cup.hp.com...P > Hello, > K > I've just found this command, which is really unknown to me. Does anybody  konw$ > about some practical use of this ? >p
 > SET SERVICEn > /SEPARATOR=option=characterT >" > Optional. Default: 0 (null).D > Character that separates the following fields in received packets: > PORT=character > USER_NAME=character  > PASSWORD=character > COMMAND=characterH >N	 > Thanks,t >c > Jirka    ------------------------------  % Date: Fri, 13 Jun 2003 12:34:29 -0500i From: don.rogstad@dalsemi.com55 Subject: System Machine Check through vecter 00000660 1 Message-ID: <03061312342900@dscis6-0.dalsemi.com>f  K I am receiving machine check errors whenever I shut down OpenVMS 7.3-1.  It-K appears to me that something is not shutting down properly, but I am unsure I what that might be.   Has anyone else experienced this.  Here is the infosL (the last one of serveral) that appears on the console screen (white letters on blue background):    , System Machine Check through vecter 00000660& logout frame address 0x6060 code 0x20F   IPRs:yP EXC_ADDR: 000000000011E46C EXC_SUM:  0000000000000000 EXC_MASK: 000000000011E46CP ISR:      0000000000600000 ICSR:     000000414C020000 IC_PERR:  0000000000000000P DC_PERR:  0000000000000000 VA:       0000008700000018 MM_STAT:  00000000000145D0P SC_ADDR:  FFFFFF000001460F SC_STAT:  0000000000000000 BCTAG_AD: FFFFFF80000F1FFFP EI_ADDR:  FFFFFFFFFC3DAFBF FILL_SYN: 000000000000B10C EI_STAT:  FFFFFFF005FFFFFF LD_LOCK:  FFFFFF00000E23DF a  	 CPU CSRs: M CIA_REV: 0000 0102 PCI_LAT: 0000 FF00 CIA_CTRL: 2104 EC37 CIA_CNFG: 0000 0021sM HAE_MEM: 8000 A000 HAE_IO:  0200 0000 CFG:      0000 0000 EIR0:     FFE0 0000sM EIR1:    0000 80FF CIA_ERR: 8000 0080 ERR_STAT: 0000 001A ERR_MASK: 0000 0F97n9 EXX_SYN: 0000 0000 MEM_ST0: 0000 0800 MEM_ST1:  0010 0000 9 PCI_ERR0:0A05 0000 PCI_ERR1:0000 0800 PCI_ERR2: 0000 0800s   Memory Base Address CSRs:3 MCR:  2001 0000   F MBA0: 0000 00F5   MBA2: 0010 0033    MBA4: 0000 0000   MBA6: 0000 0000F MBA8: 0000 0000   MBAA: 0014 0033    MBAC: 0000 0000   MBAE: 0000 00004 TMG0: 6038 C140   TMG1: 6038 C140    TMG2: 6038 C140    
 Machine info:/ System Configuration:D ---------------------  System Information:uI System Type   AlphaServer 1000A 5/400                   Primary CPU ID 00aP Cycle Time    2.5 nsec (400 MHz)                        Pagesize       8192 Byte   Memory Configuration:nD Cluster    PFN Start    PFN Count         Range (MByte)        UsageF  #00             0          224         0.0 MB -     1.7 MB    ConsoleF  #01           224        48903         1.7 MB -   383.8 MB    System F  #02         49127           25       383.8 MB -   384.0 MB    Console  # Per-CPU Slot Processor Information: K CPU ID         00                        CPU State    rc,pa,pp,cv,pv,pmv,plh- CPU Type       EV56  Pass 2 (21164A)         EG PAL Code       1.21-4                    Halt PC      00000000.20000000 G CPU Revision   ....                      Halt PS      00000000.00001F003N Serial Number  ..........                Halt Code    "Bootstrap or Powerfail"J Console Vers   V5.6-109                  Halt Request "Default, No Action"     Adapter Configuration: ----------------------C TR Adapter     ADP               Hose Bus   BusArrayEntry     Node o4 CSR            Vec/IRQ Port Slot Device Name / HW-IdC -- ----------- ----------------- ---- ----------------------- ---- I< ---------------------- ---- ---- ---------------------------4  1 KA1B05      FFFFFFFF.8124A580    0 BUSLESS_SYSTEM4  2 PCI         FFFFFFFF.8124A800    0 PCI           C                                             FFFFFFFF.8124AC20   38 -( FFFFFFFF.83E60000  900         7 MERCURYC                                             FFFFFFFF.8124AC58   40 c$ FFFFFFFF.840C4000  900         8 PBBC                                             FFFFFFFF.8124AD00   58 _2 FFFFFFFF.840CC000  910 DRA:   11 Mylex DAC960 RAIDC                                             FFFFFFFF.8124AD70   68 r5 FFFFFFFF.840CE000  950 EWA:   13 DE500-BA 100 mbit NI 4  3 EISA        FFFFFFFF.8124B040    0 EISA          C                                             FFFFFFFF.8124B298    0 o- FFFFFFFF.83E62000    0         0 System Board 4  4 XBUS        FFFFFFFF.8124B640    0 XBUS          C                                             FFFFFFFF.8124B898    0 e2 FFFFFFFF.83E62000    0         0 EISA_SYSTEM_BOARDC                                             FFFFFFFF.8124B8D0    1 e' FFFFFFFF.83E62000    6 DVA:    1 Floppy C                                             FFFFFFFF.8124B908    2 a= FFFFFFFF.83E62000    7 LRA:    2 Line Printer (parallel port) C                                             FFFFFFFF.8124B940    3 m4 FFFFFFFF.83E62000    3 TTA:    3 NS16450 Serial PortC                                             FFFFFFFF.8124B978    4 r4 FFFFFFFF.83E62000    4 TTB:    4 NS16450 Serial Port4  5 PCI         FFFFFFFF.8124BB80    0 PCI           C                                             FFFFFFFF.8124BE18  200 t6 FFFFFFFF.840C6000  900 PKA:    0 Qlogic ISP1020 SCSI-2C                                             FFFFFFFF.8124BE88  210 e- FFFFFFFF.840C8000  990 GQA:    2 S3 Trio32/64eC                                             FFFFFFFF.8124BEF8  220 s+ FFFFFFFF.840CA000  9D0 EWB:    4 NI (Tulip) D -------------------------------------------------------------------- Patch info:nP ----------------------------------- ----------- ----------- --------------------I PRODUCT                             KIT TYPE    OPERATION   DATE AND TIMEeP ----------------------------------- ----------- ----------- --------------------P DEC AXPVMS TCPIP_ECO V5.3-182       Patch       Install     25-APR-2003 16:03:32P DEC AXPVMS VMS731_TDF V1.0          Patch       Install     25-APR-2003 15:58:13P DEC AXPVMS VMS731_MSCP V1.0         Patch       Install     25-APR-2003 15:57:29P DEC AXPVMS VMS731_QMAN V1.0         Patch       Install     25-APR-2003 15:55:50P DEC AXPVMS VMS731_PTHREAD V1.0      Patch       Install     25-APR-2003 15:54:32P DEC AXPVMS VMS731_LINKER V1.0       Patch       Install     25-APR-2003 15:52:42P DEC AXPVMS VMS731_ACRTL V1.0        Patch       Install     25-APR-2003 15:42:47P DEC AXPVMS VMS731_DCL V3.0          Patch       Install     25-APR-2003 15:24:15P DEC AXPVMS VMS731_SYS V3.0          Patch       Install     25-APR-2003 14:46:29P DEC AXPVMS VMS731_RMS V2.0          Patch       Install     25-APR-2003 14:45:25P DEC AXPVMS VMS731_F11X V1.0         Patch       Install     25-APR-2003 14:43:58P DEC AXPVMS VMS731_BACKUP V1.0       Patch       Install     25-APR-2003 14:42:41P CPQ AXPVMS CSWB V1.0                Full LP     Install     21-FEB-2003 01:08:07P DEC AXPVMS JAVAAPIDOC131 V1.3-11    Full LP     Install     18-DEC-2002 18:43:49P DEC AXPVMS JAVA131 V1.3-15          Full LP     Install     18-DEC-2002 17:44:06P CPQ AXPVMS CSWS V1.3                Full LP     Install     16-DEC-2002 00:03:44P CPQ AXPVMS CSWS_JAVA V2.0           Full LP     Install     16-DEC-2002 00:03:44P CPQ AXPVMS CSWS_PERL V1.1           Full LP     Install     16-DEC-2002 00:03:44P CPQ AXPVMS CSWS_PHP V1.1            Full LP     Install     16-DEC-2002 00:03:44P CPQ AXPVMS PERL561_UPDATE V1.0      Patch       Install     15-DEC-2002 23:55:33P CPQ AXPVMS PERL V5.6-1              Full LP     Install     15-DEC-2002 23:41:37P CPQ AXPVMS CDSA V1.0-2              Full LP     Install     11-DEC-2002 00:58:02P DEC AXPVMS DECNET_PHASE_IV V7.3-1   Full LP     Install     11-DEC-2002 00:58:02P DEC AXPVMS DWMOTIF V1.2-6           Full LP     Install     11-DEC-2002 00:58:02P DEC AXPVMS OPENVMS V7.3-1           Platform    Install     11-DEC-2002 00:58:02P DEC AXPVMS TCPIP V5.3-18            Full LP     Install     11-DEC-2002 00:58:02P DEC AXPVMS VMS V7.3-1               Oper System Install     11-DEC-2002 00:58:02P DEC AXPVMS DECNET_PHASE_IV V7.2-1   Full LP     Remove      11-DEC-2002 00:58:02P DEC AXPVMS DWMOTIF V1.2-5           Full LP     Remove      11-DEC-2002 00:58:02P DEC AXPVMS OPENVMS V7.2-1           Platform    Remove      11-DEC-2002 00:58:02P DEC AXPVMS TCPIP V5.1-15            Full LP     Remove      11-DEC-2002 00:58:02P DEC AXPVMS VMS V7.2-1               Oper System Remove      11-DEC-2002 00:58:02P DEC VMS NS_NAV_EXPORT V3.3          Full LP     Install     25-JUL-2002 23:00:43P DEC AXPVMS CXML V3.59-2             Full LP     Install     22-MAY-2002 22:59:41P DEC AXPVMS FORTRAN V7.4-4           Full LP     Install     22-MAY-2002 21:28:04P DEC AXPVMS FORRTL V7.4-4            Full LP     Install     22-MAY-2002 21:20:17P DEC AXPVMS TCPIP V5.1-15            Full LP     Install     21-MAY-2002 00:27:14P DEC AXPVMS TCPIP V5.0-10            Full LP     Remove      21-MAY-2002 00:27:14P DEC AXPVMS DECNET_PHASE_IV V7.2-1   Full LP     Install     16-MAY-2002 23:06:55P DEC AXPVMS DWMOTIF V1.2-5           Full LP     Install     16-MAY-2002 23:06:55P DEC AXPVMS OPENVMS V7.2-1           Platform    Install     16-MAY-2002 23:06:55P DEC AXPVMS TCPIP V5.0-10            Full LP     Install     16-MAY-2002 23:06:55P DEC AXPVMS VMS V7.2-1               Oper System Install     16-MAY-2002 23:06:55P ----------------------------------- ----------- ----------- --------------------   Thanks for any insight,t Don Rogstadn OpenVMS Hobbyist   ------------------------------  % Date: Fri, 13 Jun 2003 10:48:59 -0400a* From: "Chris Moore" <moore_mc@hotmail.com>  Subject: TCP/IP Services startup1 Message-ID: <BvlGa.2418$PD3.28429@nnrp1.uunet.ca>   L We have  recently inherited an Alpha 4000 running 7.1-2 with TCP/IP Services= 5.0A-ECO1.  The normal system startup is executed, including:0  # $ @SYS$STARTUP:SYS$NET_SERVICES.COMy             andP  $ @SYS$STARTUP:TCPIP$STARTUP.COM  L but once the boot is complete, all protocols work correctly, but a $SHOW NET yields the following:i  B Product: TCP/IP Node: <TCPIP not yet started> Address(es): 0.0.0.0    B Another node, same hardware, same versions, with seemingly similar- startup,displays correctly.  Any suggestions?    ------------------------------  # Date: Fri, 13 Jun 2003 12:50:05 GMTv& From: Woland <weiland@no.spam.post.cz>$ Subject: UCX : set service/separator/ Message-ID: <CFN37785604557581@news.cup.hp.com>l   Hello,  O I've just found this command, which is really unknown to me. Does anybody konw  " about some practical use of this ?   SET SERVICEf /SEPARATOR=option=character    Optional. Default: 0 (null).  C Character that separates the following fields in received packets: t PORT=character   USER_NAME=character  PASSWORD=character   COMMAND=character    Thanks,a   Jirkay   ------------------------------  % Date: Fri, 13 Jun 2003 09:53:29 +0200e2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>5 Subject: Update: Cluster unusable by SMBD port scans?m3 Message-ID: <3EE982F9.2697BA14@ikp.tu-darmstadt.de>o  H Indeed yesterday evening from 19:08 to 19:20 in the accounting more thenF 2000 processes are seen. Every half a second a new process was started
 from the same  remote node name 217.20s/ rem node address 16661 (how to translate this?)i- everyone with "normal successful completion".   " Afterwards logins were impossible.   Regards  Otto -- i,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  # Date: Fri, 13 Jun 2003 08:33:11 GMT - From: "labadie" <tonari_no_tottoro@127.0.0.1>o9 Subject: Re: Update: Cluster unusable by SMBD port scans? 2 Message-ID: <b%fGa.2503$bw3.2013@news.cpqcorp.net>  = "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de> wrote in message - news:3EE982F9.2697BA14@ikp.tu-darmstadt.de... J > Indeed yesterday evening from 19:08 to 19:20 in the accounting more thenH > 2000 processes are seen. Every half a second a new process was started > from the samep > remote node name 217.20 1 > rem node address 16661 (how to translate this?)m/ > everyone with "normal successful completion".f >r$ > Afterwards logins were impossible. >m	 > Regardsu > Otto > --. >  -------------------------------------------. > | Dr. Otto Titze, Kernphysik TUD           |. > | Schlossgartenstr. 9, D-64289 Darmstadt   |. > | titze@ikp.tu-darmstadt.de                |. > | Tel: +49(6151)16-2916,FAX:16-4321        |. >  -------------------------------------------   Hellos   May be you should just issue a $ tcpip set comm/reject=...c  to stop the source annoying you.   regards    Grard   ------------------------------  % Date: Fri, 13 Jun 2003 04:12:56 -0400J" From: JF Mezei <jfmezei@istop.com>9 Subject: Re: Update: Cluster unusable by SMBD port scans?-) Message-ID: <3EE9876C.C2A744C5@istop.com>r  I I see a lot of attemps to connect to port 445 at my end. My router simplyoD blocks them, so hackers move on. But if you have port 445 (microsoftK networking stuff) opened, they will try and try and try to find a weakness,4$ thinking you are a microsoft server.    Does Samba respond to port 445 ?  F If this is the case for you, then this is the perfect example of why a  "firewall" helps even VMS sites.   ------------------------------  # Date: Fri, 13 Jun 2003 08:53:48 GMTi& From: Woland <weiland@no.spam.post.cz>9 Subject: Re: Update: Cluster unusable by SMBD port scans? 0 Message-ID: <CFN377854405059491@news.cup.hp.com>  4 On Fri, 13 Jun 2003 09:53:29 +0200 "Dr. Otto Titze" " <titze@ikp.tu-darmstadt.de> wrote:  J > Indeed yesterday evening from 19:08 to 19:20 in the accounting more thenH > 2000 processes are seen. Every half a second a new process was started > from the sames > remote node name 217.20a1 > rem node address 16661 (how to translate this?)l/ > everyone with "normal successful completion".  > $ > Afterwards logins were impossible. > 	 > Regardsa  N It looks like either DoS (unfortunately successful) or brute force attack. Do ) you have some more detailed log records ?    Jirka    ------------------------------  % Date: Fri, 13 Jun 2003 12:45:23 +0200 2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>9 Subject: Re: Update: Cluster unusable by SMBD port scans?c3 Message-ID: <3EE9AB43.83EAD3B4@ikp.tu-darmstadt.de>a   Jirka,  B there have been a lot of log files LOG.SERVER;xxx from the current? attack, but they unfortunately have no useful information, onlym. "Error writing 4 bytes to client. -1. Exiting"D This is in principle not bad, but a process smbd_bgxxx is left over,9 which accesses sysuaf and this finally makes the trouble.w   Regard Otto  r,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  % Date: Fri, 13 Jun 2003 13:01:44 +0200 2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>9 Subject: Re: Update: Cluster unusable by SMBD port scans?,2 Message-ID: <3EE9AF18.A2DB4A6@ikp.tu-darmstadt.de>   Gerard,t    > May be you should just issue a > $ tcpip set comm/reject=...n" > to stop the source annoying you.   The problem here isu< - I don't know the IP address. I don't know how to interpret*   the information from the account record:   remote node name 217.20:   remote node address 16661 =   The first obviously means: 217.20.x.x, but how do I get x.xe=   from "remote node address". I tried it with the accounting a;   information from a know IP-address, but could not get x.x:6 - These networks like 217.20.x.x are mostly DSL, like :   t-dialin.de and here the pc gets after some time when it9   newly connects a new IP-address like y.y instead of x.xl  F I never used "$ tcpip set comm/reject=..." before, but I believe it is not possible to ) $ tcpip set comm/reject=host=(217.20.*.*)r    The best would be if I could say$ $ tcpip set comm/reject=host=*.*.*.*' $ tcpip set comm/accept=host=130.83.*.* # but wildcarding is not allowed heree   RegardsN   Otto  ,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  # Date: Fri, 13 Jun 2003 11:50:58 GMTd& From: Woland <weiland@no.spam.post.cz>9 Subject: Re: Update: Cluster unusable by SMBD port scans?n0 Message-ID: <CFN377855635063079@news.cup.hp.com>  4 On Fri, 13 Jun 2003 13:01:44 +0200 "Dr. Otto Titze" " <titze@ikp.tu-darmstadt.de> wrote:   > The problem here is > > - I don't know the IP address. I don't know how to interpret, >   the information from the account record: >   remote node name 217.20h >   remote node address 16661   K If the attack still continues, you can use TCPTRACE to find out the origin.s    H > I never used "$ tcpip set comm/reject=..." before, but I believe it is > not possible tor+ > $ tcpip set comm/reject=host=(217.20.*.*)s > " > The best would be if I could say& > $ tcpip set comm/reject=host=*.*.*.*) > $ tcpip set comm/accept=host=130.83.*.*w% > but wildcarding is not allowed here: >   * Don't use wildcards, use network addresses  < set {communication | service {zzz}} /accept=network=b.b.b.b  /reject=network=a.a.a.ad   Jirkaw   ------------------------------  # Date: Fri, 13 Jun 2003 11:56:40 GMTo& From: Woland <weiland@no.spam.post.cz>9 Subject: Re: Update: Cluster unusable by SMBD port scans? 0 Message-ID: <CFN377855674720833@news.cup.hp.com>  4 On Fri, 13 Jun 2003 13:01:44 +0200 "Dr. Otto Titze" " <titze@ikp.tu-darmstadt.de> wrote:  	 > Gerard,p > ! >> May be you should just issue as >> $ tcpip set comm/reject=...# >> to stop the source annoying you.i >  > The problem here is > > - I don't know the IP address. I don't know how to interpret, >   the information from the account record: >   remote node name 217.20  >   remote node address 16661 ? >   The first obviously means: 217.20.x.x, but how do I get x.x ? >   from "remote node address". I tried it with the accounting b= >   information from a know IP-address, but could not get x.x.8 > - These networks like 217.20.x.x are mostly DSL, like < >   t-dialin.de and here the pc gets after some time when it; >   newly connects a new IP-address like y.y instead of x.x  > H > I never used "$ tcpip set comm/reject=..." before, but I believe it is > not possible toa+ > $ tcpip set comm/reject=host=(217.20.*.*)o > " > The best would be if I could say& > $ tcpip set comm/reject=host=*.*.*.*) > $ tcpip set comm/accept=host=130.83.*.*m% > but wildcarding is not allowed here  > 	 > Regardst >   N I forgot - it could also be wise to limit the number of active connections to  SMB service - see1   set service/limitg   Jirka,   ------------------------------  + Date: Fri, 13 Jun 2003 13:39:45 +0000 (UTC)r+ From: david20@alpha2.mdx.ac.uk (David Webb)t9 Subject: Re: Update: Cluster unusable by SMBD port scans?t+ Message-ID: <bcck71$42j$1@aquila.mdx.ac.uk>e  g In article <3EE9AF18.A2DB4A6@ikp.tu-darmstadt.de>, "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de> writes:a >Gerard, > ! >> May be you should just issue ae >> $ tcpip set comm/reject=...# >> to stop the source annoying you.n >o >The problem here is= >- I don't know the IP address. I don't know how to interpretn+ >  the information from the account record:V >  remote node name 217.20 >  remote node address 16661 /> >  The first obviously means: 217.20.x.x, but how do I get x.x> >  from "remote node address". I tried it with the accounting < >  information from a know IP-address, but could not get x.x7 >- These networks like 217.20.x.x are mostly DSL, like  ; >  t-dialin.de and here the pc gets after some time when itc: >  newly connects a new IP-address like y.y instead of x.x >tG >I never used "$ tcpip set comm/reject=..." before, but I believe it is. >not possible to* >$ tcpip set comm/reject=host=(217.20.*.*) >,! >The best would be if I could say % >$ tcpip set comm/reject=host=*.*.*.*-( >$ tcpip set comm/accept=host=130.83.*.*$ >but wildcarding is not allowed here >p   Try something like r  ( tcpip set comm/reject=network=217.20.0.0  / should block anything from a 217.20.*.* addressc  K Although you could use this same approach to implement something similar to@ your#  tcpip set comm/reject=host=*.*.*.* &  tcpip set comm/accept=host=130.83.*.*  C you will then be blocking everything not on the 130.83.*.* network.IE For most institutions this would probably be too blunt an instrument.a  K TCPWARE's packet filtering would provide a better solution in this instance  (or an external firewall).  N If this is SAMBA then you might want to check out whether it creates a serviceM listening on this port (I haven't looked at SAMBA for ages but seem to recallpK it created a service listening on port 139. Hence later versions may createcH services listening on other ports. If so you can add the restrictions in> tcpip set service/reject=network=217.20.0.0 samba-service-name+ which would only block access to that port.-  -  
 David Webb VMS and Unix team leader CCSS Middlesex University   ------------------------------  % Date: Fri, 13 Jun 2003 17:05:39 +0200t2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>9 Subject: Re: Update: Cluster unusable by SMBD port scans? 3 Message-ID: <3EE9E843.94F7400F@ikp.tu-darmstadt.de>i   David,   thanks.r  P > If this is SAMBA then you might want to check out whether it creates a serviceO > listening on this port (I haven't looked at SAMBA for ages but seem to recallvM > it created a service listening on port 139. Hence later versions may createAJ > services listening on other ports. If so you can add the restrictions in@ > tcpip set service/reject=network=217.20.0.0 samba-service-name- > which would only block access to that port.s  F This was just what I did. I did not want the reject on the whole comm.  M > Although you could use this same approach to implement something similar toe > your% >  tcpip set comm/reject=host=*.*.*.* ( >  tcpip set comm/accept=host=130.83.*.* > E > you will then be blocking everything not on the 130.83.*.* network. G > For most institutions this would probably be too blunt an instrument..  D Unfortunately if an accept list exists it not possible to created anD reject list. If this means that an existing accept list prohibts allH other nodes which are not mentioned, this would be just the solution for my problem.i   Regards  Otto,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  % Date: Fri, 13 Jun 2003 14:39:25 +0200R2 From: "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de>7 Subject: Upgrade1: Cluster unusable by SMBD port scans?-3 Message-ID: <3EE9C5FD.C817F68B@ikp.tu-darmstadt.de>s  E Because no logins in the whole cluster are posssible anymore after an.B attack I believe a quick and dirty solutions is make the procedure smbd_startup.comH unaccessible outside working hours. If it is not present samba access is refused.  F Another possibilty would be to check the node in the smbd_startup.com.# With telnet sessions I already used @ $ ipnode=f$getdvi(f$getdvi("tt:","tt_phydevnam"),"tt_accpornam") $ len=f$length(ipnode) $ l1=f$locate("Host:",ipnode)t $ l2=f$locate("Port:",ipnode)s' $ Node=f$extract(l1+6,l2-l1-6-2,ipnode)  etc.F But this doesn't work here. I obviously need something else instead of$ "tt:","tt_phydevnam"),"tt_accpornam"  	 Any idea?i   Regardsn Otto a,  -------------------------------------------, | Dr. Otto Titze, Kernphysik TUD           |, | Schlossgartenstr. 9, D-64289 Darmstadt   |, | titze@ikp.tu-darmstadt.de                |, | Tel: +49(6151)16-2916,FAX:16-4321        |,  -------------------------------------------   ------------------------------  # Date: Fri, 13 Jun 2003 16:09:58 GMT ; From: "John Gemignani, Jr." <jon-nope@thiswontworkossc.net> ; Subject: Re: Upgrade1: Cluster unusable by SMBD port scans? < Message-ID: <qHmGa.4909$Jw6.3265739@news1.news.adelphia.net>   Hallo Dr. Titze,  L Actually, yes, there is something that you can do.  I have it in the office,J but you could do the same.  In your startup procedure, run a program which" puts its results into DCL symbols.  K The program assigns a channel to SYS$OUTPUT (which is a BG device), then it B does the GETPEERNAME QIO to get the address and port of the remoteE connection into a sockaddr_in.  Write the contents of the strings (inaF readable form) into some DCL symbols, such as $REMOTE_HOST_ADDRESS andK $REMOTE_HOST_PORT.  Your command procedure can then do all of the work.  If-L you wanted your program could also use gethostbyaddr() to back translate the' name and even create $REMOTE_HOST_NAME.C  " I will post the program on Monday.   -Johnr  = "Dr. Otto Titze" <titze@ikp.tu-darmstadt.de> wrote in messagel- news:3EE9C5FD.C817F68B@ikp.tu-darmstadt.de... G > Because no logins in the whole cluster are posssible anymore after anyD > attack I believe a quick and dirty solutions is make the procedure > smbd_startup.comJ > unaccessible outside working hours. If it is not present samba access is
 > refused. >eH > Another possibilty would be to check the node in the smbd_startup.com.% > With telnet sessions I already used B > $ ipnode=f$getdvi(f$getdvi("tt:","tt_phydevnam"),"tt_accpornam") > $ len=f$length(ipnode) > $ l1=f$locate("Host:",ipnode)e > $ l2=f$locate("Port:",ipnode).) > $ Node=f$extract(l1+6,l2-l1-6-2,ipnode)l > etc.H > But this doesn't work here. I obviously need something else instead of& > "tt:","tt_phydevnam"),"tt_accpornam" >  > Any idea?s >r	 > Regardss > Otto. >  -------------------------------------------. > | Dr. Otto Titze, Kernphysik TUD           |. > | Schlossgartenstr. 9, D-64289 Darmstadt   |. > | titze@ikp.tu-darmstadt.de                |. > | Tel: +49(6151)16-2916,FAX:16-4321        |. >  -------------------------------------------   ------------------------------    Date: 13 Jun 2003 05:39:12 -0700- From: norbert.hanowski@dillinger.de (Norbert) < Subject: VMS to Linux via NFS: remove of directory fails ...= Message-ID: <6f378eb9.0306130439.725fd1d2@posting.google.com>    Hi, E I mount a VMS-device via NFS from a Linux-server. My NT-client on the 9 Linux-server works fine with the data on the VMS-machine. A The only Problem: I can create a new device on the VMS machine byeE Windows but I can't remove or rename this directory by the PC. In thenF WNT Explorer all directories on the VMS-device have the extension .dir .C What is wrong?  	 Thank yout     Norbert_   ------------------------------  # Date: Fri, 13 Jun 2003 15:54:04 GMT ; From: "John Gemignani, Jr." <jon-nope@thiswontworkossc.net> @ Subject: Re: VMS to Linux via NFS: remove of directory fails ...< Message-ID: <wsmGa.4865$Jw6.3263284@news1.news.adelphia.net>  L First of all, you can export your files so that the .DIR's don't appear.  Do
 this with:  /     $TCPIP ADD EXPORT "/name" /OPTIONS=TYPELESSn  L Which version of UCX/TCPIP are you using, and are you up on your ECO levels? Do you get any messages?   -John   : "Norbert" <norbert.hanowski@dillinger.de> wrote in message7 news:6f378eb9.0306130439.725fd1d2@posting.google.com...E > Hi,TG > I mount a VMS-device via NFS from a Linux-server. My NT-client on the-; > Linux-server works fine with the data on the VMS-machine.0C > The only Problem: I can create a new device on the VMS machine bynG > Windows but I can't remove or rename this directory by the PC. In therH > WNT Explorer all directories on the VMS-device have the extension .dir > .b > What is wrong? >. > Thank you  >  >s	 > Norberth   ------------------------------  # Date: Fri, 13 Jun 2003 16:29:48 GMTL; From: "John Gemignani, Jr." <jon-nope@thiswontworkossc.net> @ Subject: Re: VMS to Linux via NFS: remove of directory fails ...< Message-ID: <0_mGa.4953$Jw6.3269333@news1.news.adelphia.net>  E Oh, and as a subsequent note.  In testing we found some rather subtleAK problems around version numbers and .dir's on ODS5 disks, specifically withe3 such names as a.b.32767/a.b.32768 and home.dir.dir.l  J With ODS5 the name.type rule has been thrown out the window while the .dirL and ;version requirements remained.  With V5.4 (in EFT) and with some futureH ECOs, when using an ODS-5 disk the TYPELESS_DIRECTORIES option of exportB will apply rules (and a set of rules with the lack of the option).  H For example, if you export something that is NOT typeless on ODS-5, then- your export entry needs to be something like:D  $         /disk/gemignani.dir/work.dir  K Notice the presence of the .dir which has to be there since it is NOT beingeG exported typeless, hence the type must be present.  There are few otherrL changes in there and they will all be in the release notes, which one should' read to save them a potential migraine.n  H We had to apply new rules as problems began to spring up that we had not5 anticipated when the initial ODS-5 support was added.    -JohnO  F "John Gemignani, Jr." <jon-nope@thiswontworkossc.net> wrote in message6 news:wsmGa.4865$Jw6.3263284@news1.news.adelphia.net...J > First of all, you can export your files so that the .DIR's don't appear. Do > this with: > 1 >     $TCPIP ADD EXPORT "/name" /OPTIONS=TYPELESS- >-F > Which version of UCX/TCPIP are you using, and are you up on your ECO levels?g > Do you get any messages? >e > -Johnu >c< > "Norbert" <norbert.hanowski@dillinger.de> wrote in message9 > news:6f378eb9.0306130439.725fd1d2@posting.google.com...  > > Hi,tI > > I mount a VMS-device via NFS from a Linux-server. My NT-client on theI= > > Linux-server works fine with the data on the VMS-machine. E > > The only Problem: I can create a new device on the VMS machine by,I > > Windows but I can't remove or rename this directory by the PC. In theuJ > > WNT Explorer all directories on the VMS-device have the extension .dir > > .y > > What is wrong? > >g
 > > Thank you8 > >K > >y > > Norbert- >r >c   ------------------------------  % Date: Fri, 13 Jun 2003 10:03:45 +0100 ( From: Nic Clews <sendspamhere@127.0.0.1>* Subject: Re: where to get VAX 7730 system?) Message-ID: <3EE99371.E229D3FC@127.0.0.1>u   "Stanley F. Quayle" wrote: > * > On 12 Jun 2003 at 18:53, lip song wrote:J > > Does anyone know where can i find the above model? can be second hand,# > > may have to get a couple of it.t > G > What's your purpose?  If you need some VAX computing power, you mightrE > be able to use CHARON-VAX, and use modern, off-the-shelf, hardware:n > ) >    http://www.stanq.com/charon-vax.htmlh > 8 > [Another Shameless Plug (TM) by a CHARON-VAX reseller]    = What are the performance characteristics on what level of PC?   @ The poster is asking for a 3 way SMP, are you sure your proposed replacement is a match??   -- r? Regards, Nic Clews a.k.a. Mr. CP Charges, CSC Computer Sciencesa nclews at csc dot com-   ------------------------------  % Date: Fri, 13 Jun 2003 09:15:03 -0400z* From: "Stanley F. Quayle" <stan@stanq.com>* Subject: Re: where to get VAX 7730 system?. Message-ID: <3EE99617.15736.4E15760@localhost>  ) On 13 Jun 2003 at 10:03, Nic Clews wrote:   I > > What's your purpose?  If you need some VAX computing power, you might.G > > be able to use CHARON-VAX, and use modern, off-the-shelf, hardware:r > > + > >    http://www.stanq.com/charon-vax.htmlX > > : > > [Another Shameless Plug (TM) by a CHARON-VAX reseller] > B > The poster is asking for a 3 way SMP, are you sure your proposed > replacement is a match?|  E CHARON-VAX doesn't currently have a SMP emulator.  But it depends on AE what he's using it for...  Which we don't know.  I was suggesting an -& alternative, not a direct replacement.  
 --Stan Quayle0 Quayle Consulting Inc.  
 ----------C Stanley F. Quayle, P.E. N8SQ  +1 614-868-1363  Fax: +1 614 868-1671 1 8572 North Spring Ct. NW, Pickerington, OH  43147p= Preferred address:  stan@stanq.com       http://www.stanq.comt   ------------------------------    Date: 13 Jun 2003 06:29:22 -0700- From: wboerhout@vxcompany.com (Wilm Boerhout)n* Subject: Re: where to get VAX 7730 system?= Message-ID: <f40af425.0306130529.22f67d3e@posting.google.com>s  Y Nic Clews <sendspamhere@127.0.0.1> wrote in message news:<3EE99371.E229D3FC@127.0.0.1>...e > "Stanley F. Quayle" wrote: > > , > > On 12 Jun 2003 at 18:53, lip song wrote:L > > > Does anyone know where can i find the above model? can be second hand,% > > > may have to get a couple of it.  > > I > > What's your purpose?  If you need some VAX computing power, you mightEG > > be able to use CHARON-VAX, and use modern, off-the-shelf, hardware:u > > + > >    http://www.stanq.com/charon-vax.htmld > > : > > [Another Shameless Plug (TM) by a CHARON-VAX reseller] >  > ? > What are the performance characteristics on what level of PC?  > B > The poster is asking for a 3 way SMP, are you sure your proposed > replacement is a match?m  C For one of our customers in the Netherands, we just replaced a 7620-F system with a CHARON-VAX high end emulator (XM-Plus) on a 2.8 GHZ dualB processor Intel system, connected to an EMC SAN with all VMS disks% implemented as containers on the SAN.r  D The system runs production since June 1st, with the same load as theD original VAX: 800 interactive users and 80 running batch jobs during+ the day, and heavy backup batches at night.k  D The performance is spectacular, during the day as well as during theD night. The fast I/O to the SAN helps, as well as the raw performanceC of the emulator with the DIT feature. The customer just asked for a0 proposal for a second system...   ( We'd be happy to answer any questions...  
 Wilm Boerhout 
 VX Company The Netherlands  http://www.vxcompany.com   ------------------------------  % Date: Fri, 13 Jun 2003 18:05:33 +0200I0 From: "Wilm Boerhout" <w.boerhoutsx@xsplanet.nl>* Subject: Re: where to get VAX 7730 system?* Message-ID: <bccsum$5t9$1@reader08.wxs.nl>  H If your applications are specifically written for SMP, you may be out ofJ luck with CHARON-VAX. If you just have two or three processors for the rawJ computing power or to entertain a large number of users, CHARON-VAX is the
 way to go.   Wilm7 "Stanley F. Quayle" <stan@stanq.com> schreef in berichtP( news:3EE99617.15736.4E15760@localhost...+ > On 13 Jun 2003 at 10:03, Nic Clews wrote:  >BK > > > What's your purpose?  If you need some VAX computing power, you might0I > > > be able to use CHARON-VAX, and use modern, off-the-shelf, hardware:C > > >M- > > >    http://www.stanq.com/charon-vax.htmln > > >y< > > > [Another Shameless Plug (TM) by a CHARON-VAX reseller] > > D > > The poster is asking for a 3 way SMP, are you sure your proposed > > replacement is a match?( > F > CHARON-VAX doesn't currently have a SMP emulator.  But it depends onF > what he's using it for...  Which we don't know.  I was suggesting an( > alternative, not a direct replacement. >  > --Stan QuayleM > Quayle Consulting Inc. >2 > ----------E > Stanley F. Quayle, P.E. N8SQ  +1 614-868-1363  Fax: +1 614 868-167123 > 8572 North Spring Ct. NW, Pickerington, OH  43147l? > Preferred address:  stan@stanq.com       http://www.stanq.com  >C >S   ------------------------------  % Date: Fri, 13 Jun 2003 17:04:16 +0100 * From: "Richard Brodie" <R.Brodie@rl.ac.uk>L Subject: Re: X expertise sought: intrinsic.h - XtSpecificationRelease 5 v. 6+ Message-ID: <bccsm1$mrk@newton.cc.rl.ac.uk>.  G <sms@antinode.org> wrote in message news:03060619491441@antinode.org...s  I >    Is my "intrinsic.h" as new as it should be, and, if not, how would IoF > get it (and its text library) up-to-date this time?  (Do these files( > come with the Motif package, or what?)  ; Yes. It's part of Motif. PRODUCT SHOW OBJECT/FULL will tell-I you stuff like that. It's not directly Motif as such but the underlying X- toolkit (hence Xt...).  ? It had been sadly on X11R5 for a long while, however the latestM@ documentation on the web site is for Decwindows/Motif 1.3, which= appears to be X11R6 based. Actually R6.6, but who's counting?F  @ Some of these long outstanding little quirks are getting sorted.   ------------------------------  # Date: Fri, 13 Jun 2003 07:55:21 GMTP6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER)' Subject: [CDE V1.2-6] Keyboard locks upD5 Message-ID: <JrfGa.183144$lL2.1730529@news.chello.at>   K Yesterday I had the 7th occuring of a situation where my keyboard locked up0L (by pressing some key [combination] on the right hand side of the keyboard -I left of the cursor keys - means Right-Compose/Right-Shift/Right-Compose -EK I so far haven't found a reproducer to lock up at will). To free CDE again,SL I switch the keyboard type (in the Style Manager) to something different and then back again.  " Has anyone seen such a behaviour ?. Has anyone find a reproducer key combination ?# Has anyone seen a (temporary) fix ?0  , Can any kind soul with a support contract...   Many TIA   -Peter  J PS: It seems it is a CDE (or german keyboard) only feature. When using theI old desktop (or my normal US keyboards) I so far never saw such a lock up ) (and I'm using V1.2-6 since 2 years now).4 -- r Peter "EPLAN" LANGSTOEGER % Network and OpenVMS system specialistB E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------  % Date: Fri, 13 Jun 2003 17:34:09 +0200B From: Dirk Munk <munk@home.nl>+ Subject: Re: [CDE V1.2-6] Keyboard locks up 2 Message-ID: <bccr7p$mk4$1@news4.tilbu1.nb.home.nl>    Peter 'EPLAN' LANGSTOEGER wrote:M > Yesterday I had the 7th occuring of a situation where my keyboard locked upFN > (by pressing some key [combination] on the right hand side of the keyboard -K > left of the cursor keys - means Right-Compose/Right-Shift/Right-Compose --M > I so far haven't found a reproducer to lock up at will). To free CDE again, N > I switch the keyboard type (in the Style Manager) to something different and > then back again. > $ > Has anyone seen such a behaviour ?0 > Has anyone find a reproducer key combination ?% > Has anyone seen a (temporary) fix ?V > . > Can any kind soul with a support contract... > 
 > Many TIA >  > -Peter > L > PS: It seems it is a CDE (or german keyboard) only feature. When using theK > old desktop (or my normal US keyboards) I so far never saw such a lock up + > (and I'm using V1.2-6 since 2 years now).n   That could well be.5O Please have a look at the release nots of Motif 1.2-6. In the release notes of 5N Motif 1.3 there are a few problems mentioned about the German keyboard layout.   ------------------------------  % Date: Fri, 13 Jun 2003 20:01:22 +1000R: From: "David McKenzie" <david.mckenzie@paradigm-shift.biz>Y Subject: Re: [OT] Inquirer Article Origins - The Conspiracy Theories. (was Re:  Another flC Message-ID: <3ee9a195$0$59958$c30e37c6@lon-reader.news.telstra.net>   D Actually, half right. The first ammendment as stated only applies toK relationships between the individual and the "state". So no government body J can pass a law that limits free speech in a constituational sense. HoweverD there is no guareentee of free speech between individuals, the firstD ammendmant does not apply. The limits of speech here are governed by7 defamation and libel laws rather than the constitution.   J The courts have taken a broad view of what constitutes the "state" howeverC so that the first ammendmant would seem to apply to bodies that arelJ "sufficiently connected" to the "state". This, for instance seems to cover+ schools that receive federal funding etc...4  ) Now, can we get back to technical issues?    -- tA David McKenzie                                     Paradigm Shiftu http://www.paradigm-shift.biz0! david.mckenzie@paradigm-shift.biz   - International IT Law and Privacy a speciality0   ------------------------H ""Alan Winston - SSRL Admin Cmptg Mgr"" <winston@SSRL.SLAC.STANFORD.EDU>A wrote in message news:00A20F0C.96F08086@SSRL.SLAC.STANFORD.EDU...2H > In article <M7JDa.25350$nr.2306305@twister.southeast.rr.com>, "Kenneth+ Farmer" <kfarmer@NOSPAMopenvms.org> writes:  >lI > >I think it's called "comp.os.vms" not "spew.typical.leftwing.garbage."  ;) >SF > That CNN is a Bush propaganda outlet isn't typical leftwing garbage. (TypicalL > rightwing garbage is that CNN is a haven of liberals.)  What _I_ said - if heL > thinks CNN is a Bush propaganda outlet he should see Fox News Channel - is) > closer to a typical leftwing statement.  > J > > >Besides, he's Canadian, they don't have any 1st Amendment rights.  :) >EE > Actually, if you read the 1st Amendment, it restricts Congress, not0	 citizens, J > so everybody's got 1st Amendment rights.  It just doesn't help Canadians much.XB > (Not to mention the question about whether rights are granted by governmentsXG > or just inhere in persons; if they inhere in persons, everybody's got4 rights.) >F > Text:4 > 
 > Amendment IL > H > Congress shall make no law respecting an establishment of religion, orL > prohibiting the free exercise thereof; or abridging the freedom of speech, orH > of the press; or the right of the people peaceably to assemble, and to petition- > the government for a redress of grievances.X >S >M	 > -- Alan  > --   >uL ============================================================================ ===t2 >  Alan Winston --- WINSTON@SSRL.SLAC.STANFORD.EDUA >  Disclaimer: I speak only for myself, not SLAC or SSRL   Phone:: 650/926-3056G >  Paper mail to: SSRL -- SLAC BIN 99, 2575 Sand Hill Rd, Menlo Park CA- 94025- >-L ============================================================================ ===y >s   ------------------------------   End of INFO-VAX 2003.326 ************************Jun 2003 10:48:59 -0400a* From: "Chris Moore" <moore_mc@hotmail.com>  Subject: TCP/IP Services startup1 Message-ID: <BvlGa.2418$PD3.28429@nnrp1.uunet.ca>   L We have  recently inherited an Alp                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 @                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      9D0        33    f@ff33        33    @ff339    J9,AJ        J    ,AJ9B    J9B,AJ        33    `A  33              A̩    A  A9A9A    A    A9BA9BAB  AB  A̹AffÚAffÚAAffÚAAffÚ ffA3333 ffA3333  A3333  A33339A33339A3333    A3333    A33339BA33339BA3333B  A3333B  A3333 CffA3333 CffA3333A  Ě B  ĚAA  ĚA B  ĚA)  Bff)  AA)  ABff)  NB1 NB1  ffB1  ffB1   B1   B1 9B1 9B1     B1     B1 9BB1 9BB1 B  B1 B  B1  CffB1  CffB1 NCB1 NCB1                         	   
         
                                                             !   "   #   $   %   &   '   (   )   *   +   ,   -   .   /   0   1   2   3   4   5   6   7   8   9   :   ;   <   =   >   ?   @   A   B   C   D   CD Ramp 2                              	   Dh7>~Dh7:   &    &                                                                                                                                                                  