1 INFO-VAX	Sat, 27 Sep 2003	Volume 2003 : Issue 536       Contents:0 Re: Elapsed time through the lex. func. f$getjpi0 Re: Elapsed time through the lex. func. f$getjpi@ Re: Fee Based Email (From Re: Process's PreciseMail AntiSpam...)! Info on Known VMS Exploits/Cracks % Re: Info on Known VMS Exploits/Cracks % Re: Info on Known VMS Exploits/Cracks % Re: Info on Known VMS Exploits/Cracks . Re: Memo: Re: ppp on OpenVMS for remote access* Re: Read VMS Backup *.bck files in Windows. Re: TCPIP:DNS Dual interfaces and domain names. VMS Technical Update seminar (the Netherlands)% Re: [ZIP V2.3] Bad error/return codes   F ----------------------------------------------------------------------  % Date: Sat, 27 Sep 2003 14:08:50 +0200 ( From: "H Vlems" <hvlems.nieuw@zonnet.nl>9 Subject: Re: Elapsed time through the lex. func. f$getjpi 9 Message-ID: <bl3unq$7ot8j$1@ID-143435.news.uni-berlin.de>   , "pjodk" <pjodk@yahoo.com> schreef in bericht7 news:41ca748f.0309261257.7863271d@posting.google.com... F > Is it possible, to get the elapsed time from a lexical function when running  > a DCL-procedure. > J > I can't seem to find the right parameter....or am I just using the wrong > lexical function ? >  > Eg.: >  > $ pid = f$pid("") + > $ write sys$output "This is the start..."  > $ wait 00:00:10 J > $ write sys$output "This is the elapsed time : ''f$getjpi(pid,<param>)'"  L In 7.3-2 you'll be able to use f$delta_time(<start>,<end>) which will return* the difference between the two timestamps:   $ time1=f$time() $ run whatever/ $ write sys$output f$delta_time(time1,f$time())   G It was suggested that f$add_delta_time would be kind of neat as well...    ------------------------------  % Date: Sat, 27 Sep 2003 08:50:46 -0600 4 From: Norman Lastovica <norman.lastovica@oracle.com>9 Subject: Re: Elapsed time through the lex. func. f$getjpi ) Message-ID: <3F75A3C6.57348D8@oracle.com>   < hahaha.  you're right - I showed the output of the procedure9 execution instead of it along with the procedure.  here's  the actual procedure:    Mongo TNA12:> ty x.com $ start=f$time()
 $ wait 0:0:10 . $ write sys$output "This is the elapsed time : ''f$delta_time(start,f$time())'  Mongo TNA12:>   * Alan Winston - SSRL Admin Cmptg Mgr wrote: > c > In article <3F74DB28.9A567831@oracle.com>, Norman Lastovica <norman.lastovica@oracle.com> writes: C > >vms v7.3-2 (due "real soon now") includes a new lexical function ; > >f$delta_time that'd do just what you want.  For example:  > >  > >Mongo TNA11:> @x  > >$ start=f$time()  > >$ wait 0:0:10B > >$ write sys$output "This is the elapsed time :    0 00:00:10.00. > >This is the elapsed time :    0 00:00:10.00 > >Mongo TNA11:> > ' > I'm guessing you meant something like  > I > >$ write sys$output "This is the elapsed time :  'F$delta_time(start)'"  > : > because what you wrote above doesn't calculate anything. > 	 > -- Alan  >  > --Q > =============================================================================== 2 >  Alan Winston --- WINSTON@SSRL.SLAC.STANFORD.EDUO >  Disclaimer: I speak only for myself, not SLAC or SSRL   Phone:  650/926-3056 O >  Paper mail to: SSRL -- SLAC BIN 99, 2575 Sand Hill Rd, Menlo Park CA   94025 Q > ===============================================================================    ------------------------------  % Date: Sat, 27 Sep 2003 02:13:48 -0400 * From: JF Mezei <jfmezei.spamnot@istop.com>I Subject: Re: Fee Based Email (From Re: Process's PreciseMail AntiSpam...) ) Message-ID: <3F752A90.48951827@istop.com>    Bill Todd wrote:6 > > You are assuming all ISPs would charge for emails. > C > Yes, because it would be a legal requirement for their operation.   E Nop. Go back to the roots of the internet. A collection of *separate* K interconnected networks. The USA has no jurisdiction over a Korean network. / Getting everyone to agree would not make sense.    L SMTP, as trivial as it is, provides as much information as you could obtain.L And it provides the ability to reject a message before and after it has beenK transmitted. (after the DATA phase, you can refuse a message (for instance,  disk full messages).  H One thing that could be done is to have serious servers offer ldap-styleI server. This way, a receiving SMTP server could inquire the server of the J "MAIL FROM:" to see if that user exists at that domain. And it could also,N while receiving the RFC822 header i the DATA phase, catch the From: and do theS same. If the ldap checks fail, then the message could be flagged as potential spam.   P Combine this with RBL services if known spammers, and it would be fairly robust.  A One final step is to add the smarts in a receiving SMTP server to F intelligently analyse Received: headers. That is how humans verify theM authenticity of a message, if you could automate this, it would go a long way  towards handling forged emails.   K Finally, ISPs should be given UDP if they do not stop known spammers, or if  they support them.   ------------------------------    Date: 27 Sep 2003 07:11:00 -0700' From: jnez367@yahoo.com (Jerry Nezlick) * Subject: Info on Known VMS Exploits/Cracks= Message-ID: <4f27336e.0309270611.6372563b@posting.google.com>   ? I think my VMS server was cracked some time in the past.  I see A connections opening on strange ports when no one should be on the B system.  (Outgoing to ports 113, 80, 6667, 6668.  Destinations are9 usually in Asia.)  Is there a source that will list known D exploits/cracks of VMS?  I have tried CERT and security focus.  Have not found much.    ------------------------------    Date: 27 Sep 2003 09:23:39 -0500- From: Kilgallen@SpamCop.net (Larry Kilgallen) . Subject: Re: Info on Known VMS Exploits/Cracks3 Message-ID: <ZkArIf+HUwRe@eisner.encompasserve.org>   g In article <4f27336e.0309270611.6372563b@posting.google.com>, jnez367@yahoo.com (Jerry Nezlick) writes:   A > I think my VMS server was cracked some time in the past.  I see C > connections opening on strange ports when no one should be on the D > system.  (Outgoing to ports 113, 80, 6667, 6668.  Destinations are; > usually in Asia.)  Is there a source that will list known F > exploits/cracks of VMS?  I have tried CERT and security focus.  Have > not found much.   9 You should study the SET AUDIT and ANALYZE/AUDIT command.   D The most likely source of unauthorized entry to a VMS system is weak
 passwords.  H For that matter, you should examine the output of the ACCOUNTING command= and consider enabling Image Accounting, at least temporarily.   M http://h71000.www7.hp.com/doc/731FINAL/DOCUMENTATION/PDF/OVMS_731_sys_sec.PDF    ------------------------------  # Date: Sat, 27 Sep 2003 15:23:17 GMT 6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER). Subject: Re: Info on Known VMS Exploits/Cracks5 Message-ID: <FXhdb.146791$hd6.1796866@news.chello.at>   g In article <4f27336e.0309270611.6372563b@posting.google.com>, jnez367@yahoo.com (Jerry Nezlick) writes: 9 >I think my VMS server was cracked some time in the past.   " Very unlikely, but not impossible.? A trojan horse is much more feasible, but also not very likely.   ? >                                                         I see B >connections opening on strange ports when no one should be on theC >system.  (Outgoing to ports 113, 80, 6667, 6668.  Destinations are : >usually in Asia.)  Is there a source that will list knownE >exploits/cracks of VMS?  I have tried CERT and security focus.  Have  >not found much.  F 113 is the auth port. It is usually used by SMTP mailers, checking the? username of the sender of the current incoming SMTP connection. : 80 is a webserver port, and is used for almost everything, 6667/6668 is IRC, and so on.  ( OTOH, Asia destination is indeed strange  ) Do you have an WWW proxy running on VMS ?    --   Peter "EPLAN" LANGSTOEGER % Network and OpenVMS system specialist  E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------  # Date: Sat, 27 Sep 2003 16:08:25 GMT > From: Michael Austin <maustin@no-more-spam.firstdbasource.com>. Subject: Re: Info on Known VMS Exploits/Cracks; Message-ID: <ZBidb.2123$Ph.1474@newssvr23.news.prodigy.com>    Jerry Nezlick wrote:  A > I think my VMS server was cracked some time in the past.  I see C > connections opening on strange ports when no one should be on the D > system.  (Outgoing to ports 113, 80, 6667, 6668.  Destinations are; > usually in Asia.)  Is there a source that will list known F > exploits/cracks of VMS?  I have tried CERT and security focus.  Have > not found much.     I Make sure your SMTP is not set as a relay.  this would allow them to use   your system for spam.   I One thing you can also do is (if using TCPIP for VMS) is figure out what  I networks they are using (216.0.0.0/8 for example) and set those services  . to reject any connections from those networks.  F In you SMTP.CONFIG file you can set rules to reject those networks as H well.  I use a NAT router as my "firewall" and only open ports I know I  have control of...   Michael Austin   ------------------------------  % Date: Sat, 27 Sep 2003 02:32:47 -0400   From: John Santos <JOHN@egh.com>7 Subject: Re: Memo: Re: ppp on OpenVMS for remote access 4 Message-ID: <1030927023130.403D-100000@Ives.egh.com>  # On 26 Sep 2003, Jim Strehlow wrote:   * > paul.beaudoin@hsbc.com wrote in message K > > I have a DCL procedure and dialer program that somewhat emulated the MS O > > 'easy dial' screen. It is however based on a SLIP connection but with a bit M > > of tweeking may be helpful in your problem. I did not want to presume and M > > send it unannounced so if you are interested, let me know and I'll zip it  > > up and send it.  > >  > I appreciate your help. H > I have learned by experience that I get too much spam after posting to@ > forums and newsgroups; so that e-mail address was deactivated.G > We will first test a PPP enabled terminal server suggested by others.  > F > If you have code that you want to share with the forum, you may postF > it and we may test it later; but I will decline your offer, for now,( > for a personal copy of your procedure. >  > Thank you for your offer.  >  > Jim Strehlow  C Or to tie two threads together (creating a tangle?) maybe you could ) post it to Ken Farmer's "DCL hacks" site?      --   John Santos  Evans Griffiths & Hart, Inc. 781-861-0670 ext 539   ------------------------------  % Date: Sat, 27 Sep 2003 08:39:33 +0200 2 From: "Robert Boers" <robert.boers@softresint.com>3 Subject: Re: Read VMS Backup *.bck files in Windows 6 Message-ID: <3f7530a8$0$3654$5402220f@news.sunrise.ch>   THis is probably what you need: : http://www.emulatorsinternational.com/en/products_TAPE.htm  K It can read VMS backup tapes using a SCSI tape drive connected to a Windows E system. It understands the VMS file and .BCK format and can index and " extract VMS directories and files.G In the same way it can work with VMS file images already present on the  Windows system.    Regards, Robert     / "Dave" <mullins_david@bah.com> wrote in message 7 news:d4436197.0309261006.31b0f757@posting.google.com... G > We have a large number of VMS Backup tapes that contain VMS savesets. G > We no longer have a VMS system or access to one but we still have the F > tape reader. Thanks to some software from Novasoft we have been ableE > to transfer the *.bck files from those tapes to our Windows system. D > Now we are looking for a way to read those saveset and recover theH > files from the archives. Is there a windows application out there thatA > can read those files and make them available to a windows user?  > E > We are primarily a windows shop but we have access to Linux and Sun @ > boxes if necessary, though that would certainly complicate theH > process. But as I said earlier the files are already on a Windows 2000G > system and we would like to keep them inside our windows environment.  > 	 > Thanks,  > Dave   ------------------------------  % Date: Sat, 27 Sep 2003 14:44:48 +0200 ( From: "H Vlems" <hvlems.nieuw@zonnet.nl>7 Subject: Re: TCPIP:DNS Dual interfaces and domain names 9 Message-ID: <bl40r8$7uhu7$1@ID-143435.news.uni-berlin.de>   9 "JF Mezei" <jfmezei.spamnot@istop.com> schreef in bericht " news:3F70E3D2.EE07321@istop.com... > H Vlems wrote:E > > The MAC should have the IP address of VELO(1) set for its default  gateway. > K > Since most of the IP traffic for the mac goes to the internet, it is more I > efficient to have its default gateway set to the router. Just wondering  iof itB > is possible to tell the mac, behind the scenes, that there is an
 additional7 > route available for the second subnet served by VELO.  > J Perhaps there lies the problem: the IP address of the default gateway mustI be in the same IP network as the host that uses it, otherwise how will it ? ever find the path towards that gateway? Look at this network::   1   hostA-----(1)hostB(2)----LAN---(1)Router(2)----   E HostA must have an IP address in a different IP met than hostB(2) and I Router(1). At the same time Router(1) and hostB(2) must be in the same IP F network. So hostA can never ever use Router(1) as its default gateway, right?     >  > B > >> Would this be reasonably accurate description of the network? >  > Not quite. >             [PDA]  >               | % >   [MAC]    [VELO]   [BIKE]   [MAC2] " >     |         |        |       |" >     +---------+--------+-------+ >               |  >            [ROUTER]  >               | 
 > internet >  > L > Because of the subnet, MAC knows it need not go through the router to send to > VELO, BIKE and MAC2.F > But to send to PDA, MAC sees it as being outside the subnet and thus	 routes it C > to ROUTER. If I were able to broadcast a route behind the scenes, 	 *perhaps* L > the MAC would be smart enough to add this to the default route so that the MAC L > would know that VELO acts as a reouter for the 10.1.0.* subjet on wich the PDA 
 > is located.    ------------------------------  % Date: Sat, 27 Sep 2003 13:49:29 +0200 ( From: "H Vlems" <hvlems.nieuw@zonnet.nl>7 Subject: VMS Technical Update seminar (the Netherlands) 9 Message-ID: <bl3tjh$7o071$1@ID-143435.news.uni-berlin.de>   B The VMS Update seminar was held on 25 and 26 September in Ede, theC Netherlands. Presentations by HP and Intel, directed at a technical F audience. It was a full program, with lots of interesting information.K Compared to the Decus Europe symposium of last May this two day event was a I *lot* better. I could only attend the sessions on Thursday and it was the E best VMS event I visisted in the past 10 years. Presentations by Andy J Goldstein are of course in a class of their own (excellent) but the othersD were also very good indeed. What struck me most was the optimism andL enthousiasm clearly present in the audience and the staff. At the last threeI Decus Europe symposia the Engineering Forum was a lukewarm event at best. L Few questions from a small audience. Here we had a lively audience with moreL questions that the panel could handle in the half hour that was planned (butK it took a little longer!). Guy Peleg was visibly surprised at the amount of J reactions he got from the audience during his presentation on new featuresK in DCL. He was telling about a new lex function that will compute the delta J time between two VMS timestamps and was interrupted by questions like "CanK we also add delta-times now?" and other similar things that system managers K really want to see in DCL. Guy was clearly somewhat taken aback by all that L happened but handled it very well. It does prove that VMS is still very muchJ alive, at least in this country. It also proved without a doubt that HP isL backing VMS and that the OS does have a future. I've got to admit that sinceL the dark days of Bob Palmer, let alone Compaq, I did not have much hope thatL VMS would ever live to be 30 years old but this symposium absolutely removedI that doubt. VMS engineering is improving parts of the OS that hadn't been K touched in the last decade. They're working to improve the (IO) performance K of VMS and its ability to operate in an Internet dominated world. Security, I availability and performance are the most visible attributes for Internet J servers and it is obvious that HP wants to position VMS as a platform that excells in those three areas.   L And of course I finally had the opportunity to thank Sue Skonetksi in personJ for the Itanium boot contest prize! And thank you for organizing a perfect
 VMS event.   Hans   --------- Thursday ---------H The new HP -  One year post merger                                     - Terry Shannon     - TSKHPCK OpenVMS Future Directions                                                 -  Sue Skonetski      - HP J Intel Commitment to openVMS                                              - Piet de Ruiter      - Intel J OpenVMS 7.3-2 and beyond                                                 - Andy Goldstein    - HPA openVMS on EV7: proof of point from live customer systems - Steve         - HP C Porting openVMS and applications to the Itanium processor    - Andy  Goldstein    - HP  Itanium processor (           - Piet de Ruiter       - Intel Engineering forum  DCL in the 21st #         - Guy Peleg            - HP  Workshops until 22:30  --------- Friday ---------J HP platforms with Itanium processor directions                       - Ric Lewis            - HP F The HP OpenVMS Intanium Calling Standard                        - Andy Goldstein    - HP J Integrating of VMS data, apps, Webenabling, Apache&Tomcat,Netbeans - Kevin FitzPatrick - HP TCP/IP        - Graham Howland - HP? Dynamic volume expansion and host based volume shadowing - Andy  dstein    - HPJ Unix to openVMS an attractive option                                     - Brad McCusker   - HP   ------------------------------  # Date: Sat, 27 Sep 2003 09:05:34 GMT 6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER). Subject: Re: [ZIP V2.3] Bad error/return codes5 Message-ID: <ypcdb.142373$hd6.1693274@news.chello.at>   [ In article <3F74E730.ED7DFAC4@fsi.net>, "David J. Dachtera" <djesys.nospam@fsi.net> writes: ! >Peter 'EPLAN' LANGSTOEGER wrote: J >> Has anyone an idea how to circumvent the wrong error codes of ZIP.EXE ? >>  4 >>         "zip warning: could not open for reading"; >> gives   "%NONAME-E-INSFMEM, insufficient dynamic memory"  >>  % >>         "zip error: Nothing to do" 9 >> gives   "%NONAME-W-GPTFULL, global page table is full"  > ? >The first two are likely due to lack of system/process quotas.   C Nope. These are wrong error codes. Why didn't you try it yourself ?   4 >>         "zip error: Could not create output file"; >> gives   "%NONAME-F-ILLIOFUNC, illegal I/O function code"  > , >Can you give examples of where this occurs?  < With unsuccessful zip commands. Try one for yourself ;-) Eg.   $ cre z.zip  ^Z $ zip z.zip z.z   ( 	"zip error: Zip file structure invalid"7 gives	"%NONAME-E-BADATTRIB, bad attribute control list"   @ >I've seen ZIP do some goofy stuff, but not those in particular.  L Yes, I've seen WINZIP displaying garbage when ZIP "-V" on textfiles is used.I But, OTOH try to explain the difference what NOTEPAD versus WORDPAD shows  on textfiles...   H >On the other hand, if you're trying to use F$MESSAGE() to interpret theG >$STATUS codes returned by ZIP, them you're simply barking up the wrong H >tree. C programs don't return meaningful $STATUS values without serious >VMS-specific effort.   K No. I'm barking here, because maybe someone has seen this wrong error codes F and their corresponding silly VMS error code and perhaps already has aF solution on how to fix it (a "serious VMS-specific effort"). Maybe theH DCL qualifier effort had also error code handling included, but I doubt.  % Currently, I'm using a DCL wrapper...    --   Peter "EPLAN" LANGSTOEGER % Network and OpenVMS system specialist  E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------   End of INFO-VAX 2003.536 ************************