[comp.sys.sun] How to disable TCP/IP on the Sun?

ramesh@nevada.edu (RAMESH VISWANATHAN) (08/15/90)

Here is the scenario:

The U.S. EPA has a policy against running Sun computers on their DECnet
network due to security reasons.  I guess this has something to do with
the susceptibility of TCP/IP to break-ins.

I came across a package call TSSnet for the Sun.  This software creates
DECnet packets of the Sun, independent of TCP/IP.  TSSnet will allow
DECnet and TCP/IP to coexist.  But, I would like to stop the Sun from
either generating, or sending TCP/IP packets.  The VP of Engineering at
TSS (Thursby Software Systems, Inc.) mentioned that this could be done by
using the "ifconfig" command.

According to the SunOS Reference Manual the command "ifconfig le0 down"
will cause the system to stop attempts to transmit messages through that
interface.  This action will, however, not disable routes using the
interface.  Which according to the TSS VP will allow TSSnet to transmit
DECnet packets through this interface, although it is "dead" as far as
transmitting IP packets is concerned.  Technically, in this case, EPA
policy might allow the Sun to be on DECnet.

Here is what I need:

o Has anyone come across TSSnet?
o Are there any other ways to stop the Sun from sending IP packets?
o Could someone clarify the use of the "ifconfig" command?

Any other suggestions?

Ramesh Viswanathan.

roy@alanine.phri.nyu.edu (Roy Smith) (09/21/90)

> Are there any other ways to stop the Sun from sending IP packets?

I've never tried it, but you might try to build a kernel without the
"options INET" line in the config file.  That should drop out all of the
Internet networking code.  I suspect, however, that so much stuff would
break without the Internet IPC code that the system would be unusable.

Roy Smith, Public Health Research Institute
455 First Avenue, New York, NY 10016
roy@alanine.phri.nyu.edu -OR- {att,cmcl2,rutgers,hombre}!phri!roy
"Arcane?  Did you say arcane?  It wouldn't be Unix if it wasn't arcane!"

nagle@well.sf.ca.us (John Nagle) (10/08/90)

roy@alanine.phri.nyu.edu (Roy Smith) writes:

>> Are there any other ways to stop the Sun from sending IP packets?

Disconnecting the Ethernet cable usually works.

[[Ed's Note: Sorry... even Sunspots has to have some humor value every now
and then ;) -bdg]]