The unix rlogin and rsh commands permit users at remote trusted hosts
to login to a local machine without specifying a password. It is
possible for users at sites outside of York to masquerade as a trusted
host and gain unauthorized access to systems that allow rlogin and
rsh.
Due to this problem and the rising number of computer security
problems being reported everywhere in the Internet, machines managed
by CCIS, which include all Mail servers, Synchronize servers and other
timesharing servers at York, no longer accept rsh or rlogin
connections from machines not belonging to the yorku.ca domain. If
you are outside of the yorku.ca domain and need access to one of the
above machines, please use telnet instead.
We urge other system administrators at York to similarly restrict
these services.
For more information you can contact the helpdesk either in
person at T128 Steacie Science Building or by calling
(416)736-5800. Their E-Mail address is [log in to unmask]
--
Mike Marques )( Usenet: [log in to unmask]
Computing & Communications Services )( Bitnet: mike@yulibra
(IT division), York University. )( Voice: (416) 736-5257
Only visiting this planet...