Network Working Group J. Van Bokkelen
Request for Comments: 1173 FTP Software, Inc.
August 1990
Responsibilities of Host and Network Managers A Summary of the "Oral Tradition" of the Internet
1. Basic Responsibilities
The Internet is a co-operative endeavor, and its usefulness depends on reasonable behaviour from every user, host and router in the Internet. It follows that people in charge of the components of the Internet MUST be aware of their responsibilities and attentive to local conditions. Furthermore, they MUST be accessible via both Internet mail and telephone, and responsive to problem reports and diagnostic initiatives from other participants.
Van Bokkelen [Page 1]
RFC 1173 Responsibilities of Host and Network Managers August 1990
This communal approach to Internet management and maintenance is dictated by the present decentralized organizational structure. The structure, in turn, exists because it is inexpensive and responsive to diverse local needs. Furthermore, for the near term, it is our only choice; I don't see any prospect of either the government or private enterprise building a monolithic, centralized, ubiquitous "Ma Datagram" network provider in this century.
2. Responsibilities of Network Managers
One or more individuals are responsible for every IP net or subnet which is connected to the Internet. Their names, phone numbers and postal addresses MUST be supplied to the Internet NIC (or to the local or regional transit network's NIC) prior to the network's initial connection to the Internet, and updates and corrections MUST be provided in a timely manner for as long as the net remains connected.
3. Responsibilities of Host System Managers
One or more individuals must be responsible for every host connected to the Internet. This person MUST have the authority, access and tools necessary to configure, operate and control access to the system. For important timesharing hosts, primary domain name servers and mail relays or gateways, responsible individual(s) SHOULD be accessible via telephone 24 hours a day, 7 days a week.
Van Bokkelen [Page 2]
RFC 1173 Responsibilities of Host and Network Managers August 1990 4. Postmaster@foo.bar.bazEvery Internet host that handles mail beyond the local network MUST maintain a mailbox named "postmaster". In general, this should not simply forward mail elsewhere, but instead be read by a system maintainer logged in to the machine. This mailbox SHOULD be read at least 5 days a week, and arrangements MUST be made to handle incoming mail in the event of the absence of the normal maintainer.
5. Problems and Resolutions
Advances in network management tools may eventually make it possible for a network maintainer to detect and address most problems before they affect users, but for the present, day-to-day users of networking services represent the front line. No responsible individual should allow their "dumb-question" filter to become too restrictive; reports of the form "I haven't gotten any mumblefrotz mail for a week... " or "I could get there this morning, but not now..." should always get timely attention.
Van Bokkelen [Page 3]
RFC 1173 Responsibilities of Host and Network Managers August 1990
C. Network-related problems are most frequently related to routing: incorrect connectivity advertisements, routing loops and black holes can all have major impacts. Mechanisms are usually in place for handling failure of routers or links, but problems short of outright failure can also have severe effects.
6. The Illusion of Security
Every host and network manager MUST be aware that the Internet as presently constituted is NOT secure. At the protocol level, much more effort has been put into interoperability, reliability and convenience than has been devoted to security, although this is changing. Recent events have made software developers and vendors more sensitive to security, in both configuration and the underlying implementation, but it remains to be demonstrated how much long-term effect this will have. Meanwhile, the existing system survives through the co-operation of all responsible individuals.
Van Bokkelen [Page 4]
RFC 1173 Responsibilities of Host and Network Managers August 1990
In turn, the "sensitive" sites MUST be aware that it is impossible in the long term to deny Internet access to crackers, disgruntled former employees, unscrupulous competitors or agents of other countries. Getting an offender flushed is at best a stop-gap, providing a breathing space of a day or an hour while the security holes under attack are closed. It follows that each host's manager is ultimately responsible for its security; the more "sensitive" the application or data, the more intimate the manager must be with the host's operating system and network software and their foibles.
7. Summary
The heart of the Internet is the unique community of interest encompassing its users, operators, maintainers and suppliers. Awareness and acceptance of the shared interest in a usable Internet is vital to its survival and growth. The simple conventions presented here should be supplemented by common sense as necessary to achieve that end.
8. Security Considerations
Security issues are discussed in Sections 5 and 6.
9. Author's Address
James B. VanBokkelen FTP Software Inc. 26 Princess St. Wakefield, MA 01880