RE: [MLUG - DISCUSSION] network scanning?

["Spurling, Shannon " <EMAIL:PROTECTED>]

Well, actually, as I understood it, any scan that hits your machine on
campus that is originated by IATS or it's representative is authorized. You
kind of sign an agreement when you connect to the MU network that permits
them to do certain things. It's documented somewhere in the acceptable use
policy. It's covered under the diagnoses and prevention of network problems.
I think that's where it is. May be wrong. It's kind of like a shrink wrap
license. I thought it was really interesting, because if you think about it,
nothing is ever free. You pay the network dues and agree to follow the
rules. If you don't like it, you can simply not connect to the network.
It should be noted that a scan is not a search and seizure. You are actually
not entering the computer. You are rattling the doors to make sure they are
not locked, or no one has opened them with out permission. 

Shannon Spurling
WAN Engineer -Specialist

MOREnet, Network Services, Core Network
3212 Le Mone Industrial Blvd.
Columbia, MO 65201

Main:(573) 884-7200   Fax:(573)884-6673

EMAIL:PROTECTED
EMAIL:PROTECTED

-----Original Message-----
From: McNutt, Justin M. [mailto:EMAIL:PROTECTED]
Sent: Monday, April 02, 2001 12:54 PM
To: EMAIL:PROTECTED
Subject: RE: [MLUG - DISCUSSION] network scanning?


> What is an unauthorized scan? Am I authorized to scan someone in
> responce of their scanning my machine? Should all Netbios and Timbuktu
> (whatever that is) scans coming from UMC be considered unauthorized?
> There has to be more to those laws than just that. The definition is
> just too all-inclusive and general.

An "unauthorized scan" is any scan not explicitly permitted by the recipient
of the scan, so no, you may not automatically counter-scan someone.

Yes, many/most/all of the NetBIOS and Timbuktu scans coming from UMC are
unauthorized.  UMC campus is a very insecure network and is a known home and
jump point for miscreants (security problems both ways).

The law is indeed general and all-inclusive, as many laws are.

--J
--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/
--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/