hunt@ENH.NBS.GOV ("CRAIG HUNT") (11/24/88)
Here is an odd problem that I have been experiencing recently on my Vax 8250. I run TWG TCP/IP on my VMS Vax. Recently I have experienced a storm of rlogin processes. These processes all have the name <RLogin_XX> where XX is an incrementing number. A new <RLogin_XX> process starts on my system about every 20 seconds. These processes appear to be related to another host computer. As soon as I boot my computer up I can see the other host connect in on an rlogin socket. The rlogin processes then start immediately. If I exclude this other host from attaching to my system, the rlogin processes do not start up. If, however, I allow the other host to connect in I notice connects from my system to other systems on the network (I don't know if these are related or due to normal user actions). If I do a finger on my system, no user name is associated with the other host or the rlogin processes. Has anyone seen anything like this? I talked to Wollongong about it and was told that I could disable rlogin in my non-Eunice environment with no ill effects (which appears correct). In addition, I talked to the administrator of the other computer. He turned his computer off and the rlogins stopped. Later he turned it back on and they started again. Any ideas on this? All help would be appreciated. I currently have the problem stopped by excluding the other host from connecting to my system. However a more elegant solution would be appreciated. I am not a member of the TCP-IP list. Please send any suggestions to: hunt@enh.nbs.gov Thanks, ---Craig