Xref: utzoo news.groups:6265 news.sysadmin:1590
Path: utzoo!utgpu!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!mailrus!ames!elroy!peregrine!zardoz!neil
From: neil@zardoz.UUCP (Neil Gorsuch)
Newsgroups: news.groups,news.sysadmin
Subject: Re: Proposal for comp.security/alt.security
Message-ID: <38151@zardoz.UUCP>
Date: 19 Nov 88 00:29:33 GMT
References: <2347@isis.UUCP> <22460@tis.llnl.gov> <1147@unisec.usi.com> <356@cvbnet2.UUCP> <143@bnr-di.UUCP>
Reply-To: neil@zardoz.UUCP (Neil Gorsuch)
Distribution: na
Organization: Custom Product Design Inc., Santa Ana, CA
Lines: 39

In article <143@bnr-di.UUCP> borynec@bnr-di.UUCP (James Borynec) writes:
>In article <356@cvbnet2.UUCP>, pcolby@robbie.prime.com (Peter Colby) writes:
>> In article <33589@zardoz.UUCP> neil@zardoz.UUCP (Neil Gorsuch) writes:
>> > [much explanation regarding the social & professional qualifications
>> >  needed for inclusion on either the "zardoz" or the "isis" security lists]
>> >
>> Once again, some of us poor SA's are being discriminated against. 
>
>I am in the same boat as Peter.  I (perhaps not suprisingly) also agree
>with Peter.  We have to get security information out to ALL system 
>administrators.  This effectively requires a PUBLIC security list/group.
>It may be a bitter pill, but I see no other workable option.

I have no absolute rules on membership.  Many SA's of systems not listed
in the maps have been added to the zardoz list.  I am flexible and have
even added a mailing destination that is used for an entire continent.
For a situation such as prime.com, I would urge the domain entry site to
set up their own list which I will send to.  What I am trying to do is
limit distribution to SA's, SA implemented mailing aliases (or lists),
or user destinations that are not objectionable to their SA's.  Judging
by the flood of mail requests to join that are waiting to be processed
by me, I would say that the idea of a moderately secure list is a
popular one.  As of today, there are 153 mailing destinations, with
approximately 70 requests waiting in my mailbox.  (I'm falling a
little further behind :<) ).

To clarify the membership guidelines:

Any commercial or educational site listed in the uucp maps can be added
by a mail request from root or one the email contacts or the map entry writer.
Any commercial or educational site listed in the MX tables can be added
by a mail request from root.
Other sites require special arrangements.
Send requests to security-request@zardoz.uucp or security-request@cpd.com
A good uucp route is uunet!ccicpg!zardoz!security-request

neil@cpd.com
uunet!ccicpg!zardoz!neil
(714) 547-3000