IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
that a password that is necessary for authentication can be transmitted to the
server without being encrypted. This favours unauthorised infiltration into the
system concerned. The default value of OFF ensures that each password has to
be encrypted during the login procedure. Unencrypted passwords are not
accepted.
SET ALLOW AUDIT PASSWORDS = OFF (Default=OFF)
This parameter is connected to the auditing mechanisms of the Netware
operating system. During auditing, changes to (or manipulations of) objects
are recorded in accordance with the specifications of the configurations by
means of the AUDITCON.NLM program. Given the appropriate
authorisations, which can be set individually for each auditor in the general
assignment of rights for the operating system, an auditor can be put in a
position to read the auditing file. The authorisation in each case restricts the
scope of what can be read. The effect of the default value OFF is that the
auditor does not have to identify himself with an additional password.
SET AUTOMATICALLY REPAIR BAD VOLUMES = ON (Default=ON)
This parameter instructs the operating system to repair a volume that cannot
be mounted on system startup by invoking the VREPAIR.NLM program. This
ensures that after an uncontrolled system crash and the subsequent restart,
possible errors on volumes (data areas in the disk packs) will be rectified
without additional intervention by the system administrator.
SET REJECT NCP PACKETS WITH BAD LENGTHS = ON (Default=OFF)
The effect of this parameter when set to ON is that NCP packets with the
incorrect length will be rejected. This may lead to errors with older
applications (utilities).
SET REJECT NCP PACKETS WITH BAD COMPONENTS = ON
(Default=OFF)
The effect of this parameter when set to ON is that NCP packets with incorrect
components will be rejected. In this case, too, there may be errors with older
applications (utilities).
SET IPX NETBIOS REPLICATION OPTION = 0 (Default=2)
This parameter specifies the procedures that the IPX router is to use for
dealing with NetBIOS broadcast messages. The following values are available
for selection:
0 = No replication of type 20 IPX packets
1 = Replication of type 20 IPX packets to all available network adapters
2 = Replication of type 20 IPX packets with two special filter functions
a) Reverse Path Forwarding: type 20 IPX packets from the same
source are forwarded only once to all available network cards, even
if the packets have been received via different network adapters.
b) Split Horizon: type 20 IPX packets are not routed back into the
network from which they were received.
3 = Replication as for option 2, but not via long-distance links
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000