[comp.sys.mac] Hiding LaserWriters from unauthorised users

gregw@ultima.cs.uts.oz (Greg Webb) (03/28/90)

I am about to connect a student Mac lab to the University ethernet. The
question arises, how do I stop students from using the LaserWriters on
the remote AppleTalk networks that are also connected to the ethernet?
Our AT networks are connected with Kinetic FastPaths and GatorBoxes.

Any suggestions would be much appreciated.

 --Greg

Jim.Matthews@dartmouth.edu (Jim Matthews) (03/28/90)

In article <17649@ultima.cs.uts.oz>, gregw@ultima.cs.uts.oz (Greg Webb) writes:
> 
> I am about to connect a student Mac lab to the University ethernet. The
> question arises, how do I stop students from using the LaserWriters on
> the remote AppleTalk networks that are also connected to the ethernet?

There are ways to do this, but I'd suggest not bothering.  We have made no
effort to hide the dozens of private laserwriters on campus from our 4,000
students, and it hasn't been a problem -- I know of only one instance of 
laserwriter abuse in the last three years.

The best protections against misuse of laserwriters are the fact that the
offender can't retrieve his printout without entering someone's office, and
that anonymously wasting other people's time and paper is about as exciting
as ringing a doorbell and running away.  People may try it once, but I'd
be surprised if it became a major problem.

Jim Matthews
Dartmouth Software Development--

robin@csuchico.edu (Robin Goldstone) (03/29/90)

In article <17649@ultima.cs.uts.oz> gregw@ultima.cs.uts.oz (Greg Webb) writes:
>
>I am about to connect a student Mac lab to the University ethernet. The
>question arises, how do I stop students from using the LaserWriters on
>the remote AppleTalk networks that are also connected to the ethernet?
>Our AT networks are connected with Kinetic FastPaths and GatorBoxes.
>
>Any suggestions would be much appreciated.
>
> --Greg

If you have K-STAR 7.0 running on your Fast Paths, there are numerous
options for keeping people from using resources outside their local
zone.  There is Option 13 "Stay in Zone" that intercepts all packets bound
for other zones, Option 14 "Tilde security" which lets you selectively
designate services to be local by beginning their name with a tilde, or
Option 15 "LaserWriter Security" which only intercepts outgoing LaserWriter
packets, while allowing access to other types of resources in other zones.
      
As long as the LocalTalk net containing student Mac lab does not also
contain other Macs who need access to out-of-zone LaserWriters, one of
these options should meet your needs.

We don't have Gator Boxes so I cannot comment on a solution for them.

Robin Goldstone,  Systems Software Specialist
California State University, Chico  Computer Center
robin@csuchico.edu

Lou@cup.portal.com (William Joseph Marriott) (03/29/90)

You know, unprotected LaserWriters *could* become the next outlet of
"junk mail/fax." Imagine "junk printouts" -- advertising, politcal treatises,
poor-taste jokes and other messages suddenly appearing on your LaserWriter. C
Can't get a meeting scheduled with your school's President? Why not send 
him a letter that appears on his LaserWriter? Need to get something off your
chest? Just anonymously print it out at a strategic printer.
 
Gawd, I hope no one got any ideas (smile).
 
-The opinions expressed in this post 
are not necessarilly those of the Usenet.