security

[<DEVANS%COLOLASP.BITNET@CUNYVM.CUNY.EDU>]

Hard on the heels of the East Coast BBS citations (and, possibly,
inspired by it) I am now faced with the following problem. Someone has
been accessing my system, coming in either AX.25 or NETROM, using
MY call and sending offensive messages out through my system. Naturally,
the audit trail makes it look like I was the source of these messages.

Would it be possible (Phil/Kelvin/Anders) to structure NOS so that
if a user has an entry in the FTPUSERS file, he is ALWAYS prompted
for a password, even if he is coming in over a non-TCP connection?

I am seriously considering pulling my system off the air now, which,
of course, is exactly what this idiot wants... :-(

  Doc