SGI (in IRIX 6.3) has a really nice interface which will allow you to turn
this feature on and off.
Another warning: The "guest" account exists without password on every IRIX
system by default.
One more: Beware the IPForwarding on/off checkbox on IRIX 6.3 (and possibly
others). It doesn't do a thing. A dual-homed SGI O2 running 6.3 clearly said
that IPForwarding was off, and was still forwarding my packets through to the
other side. The sysadmin who was running the machine had to modify a couple
scripts in /etc/init.d to fix the problem. I don't have any further details,
as I was busy breaking into other systems, not paying attention to how it was
fixed. :-) Anyway, if you have a dual-homed SGI, make sure it's not forwarding
by actually testing it rather than believing the GUI.
(And who said penetration testing wasn't a useful security service?) :-)
-Mike
mcn@EnGarde.com
http://www.EnGarde.com/~mcn