| From: | "J.D. Falk" <jdfalk@****.CAIS.COM> |
|---|---|
| Subject: | Example of new Matrix rules |
| Date: | Mon, 20 Mar 1995 22:33:37 -0500 |
Divided Assets, and am /very/ happy with 'em -- they're much more
realistic. I was immediately able to sit down and write up a map of
Capital Area INTERNET Service (my 'net provider), which I thought I'd
share with y'all.
I'm not sure about security levels in comparison to reality, so
I've included a little bit of security info with the descriptions.
Can't easily do the circles-type map they describe, so I'm forced
to do this type (which makes just as much sense to me, but looks way too
much like the old style.)
Nodes marked with squiggly brackets are not specifically mapped
out here, because that'd just be too damn complicated. Note that while
all links are bi-directional, some allow either end to be the originator
of the request, etc., and are drawn with = and I instead of - and |.
The "Level" numbers at the top correspond to the new level rules;
level 5 has the highest level of security, while level 6 has very little.
Level 1 2 3 4 5 6 N/A
+==============[D]<------------------[MATRIX]
I I
I I
[A]-->-->[B]------>[F] I
| | >---^ I
{C} | | I
>--->[E]========+
| I
>--->[G]========+
| I
>--->[H]========+
Not shown: (O) and (R)
[A] Dial-in
Anybody can dial the phone number(s) for the CAIS systems. This
is a high level of security, though, because you have to have a
registered username and password in order to get to the next level.
[B] Shell account
This is where users can run programs or access their files.
{C} SLIP or PPP daemons
This allows any pre-approved outside, non-matrix system to
temporarially connect to the matrix via some of CAIS's machines. Connects
directly to [D] with normal access, or to [G] or [H] with a preferred
level of access.
[D] TCP/IP sockets
Allows connections to or from other Matrix systems.
[E] FTP or HTTP daemon
Allows outside machines to request file transfers. Requires
knowledge of full pathname of file required (listings are avaliable upon
request.) Also allows these outside machines to deposit files, given
correct parameters.
[F] File server
Contains most data stored by CAIS users, as well as the data used
by level E. Note that personal data is better protected than public data.
[G] NNTP daemon
Allows other CAIS machines or any of a list of approved outside
machines to transfer or request USENET news articles.
[H] SMTP daemon
Allows CAIS users to send EMail to outside machines, or outside
machines to deposit EMail for CAIS users. Though not shown, this node
has a direct connection to node [F].
(O) Console (not shown)
The console physically resides at the CAIS offices, and can only
be accessed from there. It connects directly to node [B], and is the
only way to gain root access on node [G].
(R) Root access (not shown)
Root access is avaliable only from node [B], and is actually just
a higher level of security inside that node. With root access, a user
has total control over everything.
