ramesh@nevada.edu (RAMESH VISWANATHAN) (08/15/90)
Here is the scenario: The U.S. EPA has a policy against running Sun computers on their DECnet network due to security reasons. I guess this has something to do with the susceptibility of TCP/IP to break-ins. I came across a package call TSSnet for the Sun. This software creates DECnet packets of the Sun, independent of TCP/IP. TSSnet will allow DECnet and TCP/IP to coexist. But, I would like to stop the Sun from either generating, or sending TCP/IP packets. The VP of Engineering at TSS (Thursby Software Systems, Inc.) mentioned that this could be done by using the "ifconfig" command. According to the SunOS Reference Manual the command "ifconfig le0 down" will cause the system to stop attempts to transmit messages through that interface. This action will, however, not disable routes using the interface. Which according to the TSS VP will allow TSSnet to transmit DECnet packets through this interface, although it is "dead" as far as transmitting IP packets is concerned. Technically, in this case, EPA policy might allow the Sun to be on DECnet. Here is what I need: o Has anyone come across TSSnet? o Are there any other ways to stop the Sun from sending IP packets? o Could someone clarify the use of the "ifconfig" command? Any other suggestions? Ramesh Viswanathan.
roy@alanine.phri.nyu.edu (Roy Smith) (09/21/90)
> Are there any other ways to stop the Sun from sending IP packets?
I've never tried it, but you might try to build a kernel without the
"options INET" line in the config file. That should drop out all of the
Internet networking code. I suspect, however, that so much stuff would
break without the Internet IPC code that the system would be unusable.
Roy Smith, Public Health Research Institute
455 First Avenue, New York, NY 10016
roy@alanine.phri.nyu.edu -OR- {att,cmcl2,rutgers,hombre}!phri!roy
"Arcane? Did you say arcane? It wouldn't be Unix if it wasn't arcane!"
nagle@well.sf.ca.us (John Nagle) (10/08/90)
roy@alanine.phri.nyu.edu (Roy Smith) writes: >> Are there any other ways to stop the Sun from sending IP packets? Disconnecting the Ethernet cable usually works. [[Ed's Note: Sorry... even Sunspots has to have some humor value every now and then ;) -bdg]]