[Info-vax] OpenVMS TCPIP equivalent of hosts.deny?
Supratim Sanyal
supratim at riseup.invalid
Fri Nov 18 17:58:54 EST 2016
In article <f0a9abb3-0851-4b3c-ad2e-3526f34f6ff5 at googlegroups.com>,
sms.antinode at gmail.com says...
>
> > [...] There is a discussion so limits of being 32 but not
> > sure if that is per command or total for each of
> > host/network. [...]
>
> For any service, you get a maximum of 16 networks and 32
> hosts. The number of names/addresses per command matters not
> at all.
>
> tcpip help set service /reject
>
> > I would probably keep a backup of what I had set [...]
>
> Around here, I use DCL scripts to do the work. For
> example (TELNET_REJECT.COM):
>
> $!
> $! Set Telnet rejected networks.
> $!
> $ tcpip
> !
> ! Define the rejection message.
> !
> set service Telnet /reject = message = -
> "Telnet IP address rejected"
> [...]
> !
> ! Clear the host reject list.
> !
> set service Telnet /reject = nohost = *
> !
> ! Clear the network reject list.
> !
> set service Telnet /reject = nonetworks = *
> !
> ! Rejected hosts:
> !
> ! hosted-by.i3d.net 2014-01-10
> set service Telnet /reject = host = (31.204.155.73)
> [...]
> !
> ! Rejected networks:
> !
> ! ttnet.net.tr (KEEP.)
> ! 78.0.0.0 - 79.x.x.x
> ! 80.0.0.0 - 95.x.x.x
> set service Telnet /reject = networks = (78.0.0.0:254.0.0.0)
> set service Telnet /reject = networks = (80.0.0.0:240.0.0.0)
> [...]
> !
Many thanks, this is a great pointer. This, along with the TCPIP SET
ROUTE, seem to be the best options.
Sorry, my bad, should have included this:
$ tcpip show ver
Compaq TCP/IP Services for OpenVMS VAX Version V5.1
on a VAXserver 3900 Series running OpenVMS V7.3
More information about the Info-vax
mailing list