RE: [MLUG - DISCUSSION] network scanning?

["McNutt, Justin M." <EMAIL:PROTECTED>]

True.  Certain people (Greg Johnson & Co.) in IATS are permitted to scan the
network any time they want.  Certain other folks (Telecom) are permitted to
scan the network when responding to a network problem/issue/something, but
not regularly (according to the IATS/Telecom minimum-invasiveness policy).

Other than that, people in general may not run port scans on UMC campus.
The list above is the definitive list of "authorized people" who scan MU
networks.

If you're getting scans from anyone else, let Greg Johnson know immediately.

Shannon is right, though.  When you connect to MU's network, you implicitly
agree to abide by the rules, which includes a periodic scan... by Greg.

--J

> -----Original Message-----
> From: Spurling, Shannon [mailto:EMAIL:PROTECTED]
> Sent: Monday, April 02, 2001 1:24 PM
> To: EMAIL:PROTECTED
> Subject: RE: [MLUG - DISCUSSION] network scanning?
> 
> 
> Well, actually, as I understood it, any scan that hits your machine on
> campus that is originated by IATS or it's representative is 
> authorized. You
> kind of sign an agreement when you connect to the MU network 
> that permits
> them to do certain things. It's documented somewhere in the 
> acceptable use
> policy. It's covered under the diagnoses and prevention of 
> network problems.
> I think that's where it is. May be wrong. It's kind of like a 
> shrink wrap
> license. I thought it was really interesting, because if you 
> think about it,
> nothing is ever free. You pay the network dues and agree to follow the
> rules. If you don't like it, you can simply not connect to 
> the network.
> It should be noted that a scan is not a search and seizure. 
> You are actually
> not entering the computer. You are rattling the doors to make 
> sure they are
> not locked, or no one has opened them with out permission. 
> 
> Shannon Spurling
> WAN Engineer -Specialist
> 
> MOREnet, Network Services, Core Network
> 3212 Le Mone Industrial Blvd.
> Columbia, MO 65201
> 
> Main:(573) 884-7200   Fax:(573)884-6673
> 
> EMAIL:PROTECTED
> EMAIL:PROTECTED
> 
> -----Original Message-----
> From: McNutt, Justin M. [mailto:EMAIL:PROTECTED]
> Sent: Monday, April 02, 2001 12:54 PM
> To: EMAIL:PROTECTED
> Subject: RE: [MLUG - DISCUSSION] network scanning?
> 
> 
> > What is an unauthorized scan? Am I authorized to scan someone in
> > responce of their scanning my machine? Should all Netbios 
> and Timbuktu
> > (whatever that is) scans coming from UMC be considered unauthorized?
> > There has to be more to those laws than just that. The definition is
> > just too all-inclusive and general.
> 
> An "unauthorized scan" is any scan not explicitly permitted 
> by the recipient
> of the scan, so no, you may not automatically counter-scan someone.
> 
> Yes, many/most/all of the NetBIOS and Timbuktu scans coming 
> from UMC are
> unauthorized.  UMC campus is a very insecure network and is a 
> known home and
> jump point for miscreants (security problems both ways).
> 
> The law is indeed general and all-inclusive, as many laws are.
> 
> --J
> --
> To manage your subscription, go to 
> http://mlug.missouri.edu/members/edit.php
> 
> Archives are available at http://mlug.missouri.edu/list-archives/
> --
> To manage your subscription, go to 
> http://mlug.missouri.edu/members/edit.php
> 
> Archives are available at http://mlug.missouri.edu/list-archives/
> 
--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/