Path: utzoo!attcan!uunet!husc6!bbn!rochester!pt.cs.cmu.edu!cadre!pitt!darth!orac!pat
From: pat@orac.UUCP (Pat Barron)
Newsgroups: news.sysadmin
Subject: Re: 4bsd ftpd for ultrix (was Re: A fix for ftpd)
Message-ID: <130@orac.UUCP>
Date: 20 Nov 88 04:22:58 GMT
References: <2983@ci.sei.cmu.edu> <25914@teknowledge-vaxc.ARPA>
Followup-To: comp.unix.ultrix
Lines: 19

In article <25914@teknowledge-vaxc.ARPA>, mkhaw@teknowledge-vaxc.ARPA (Mike Khaw) writes:
> But don't you lose tcp<->decnet gatewaying if you replace the Ultrix ftpd
> with the 4.3bsd ftpd?

Yes, you do - if you use that functionality, then you lose, and (for the
moment) you get to choose between no DECnet-Internet Gateway FTP, and no
anonymous FTP (since the only other fix, until Ultrix V3.0, is to disable
anonymous FTP, since DEC won't distribute the source for the DECnet-Internet
Gateway and the "official" fix for V3.0-beta is "turn off anonymous FTP").

One other thing, speaking of security problems - there is a HUGE one
in the DECnet-Internet gateway.  DEC knows about it, and will send you
a fix - but only if you ask for it.  DON'T run the gateway version of
telnetd until you get the fix.  I won't post the problem here, but will
describe it if you send me mail.

Follow-ups to comp.unix.ultrix, please.

--Pat.