Explanation of ResNet regulations
Why are there so many regulations?
ResNet has its own Regulations to ensure that it can deliver its services to its users, protecting them from other, badly-behaved, users who could have a detrimental effect on the network. ResNet is connected to other networks, and each is governed by its own regulations. ResNet is a part of the University network, and so the University's Regulations, code of conduct and guidelines for the use of computing facilities apply to ResNet. ResNet's Internet access is provided through the national academic network, JANET, and so its Acceptable Use Policy applies.
What happens if I break the Regulations?
The possible penalties are explained clearly in section 3 of the regulations for the use of Computing facilities and section 2 of the additional regulations for the use of ResNet facilities.
I think someone else is breaking the Regulations, what do I do?
You should report this to the ResNet Co-Ordinator, as soon as possible, who will take appropriate action.
Why should I care about computer security?
- Your computer and its data may be very important. For example, you could have a real problem if a computer virus destroyed your only copy of an essay you have been working on.
- Under ResNet's regulations, you can be held responsible for any abuse of the network that occurs using your computer or ResNet connection - even if someone else carried it out. For example, if anyone uses your computer to send abusive email you could be blamed. This could happen if they sit down and use your computer directly or break into it from anywhere else on ResNet or the Internet.
Reading the document Information about viruses and computer security and following the advice will avoid these sorts of problems.
Can I use ResNet for playing games?
Yes, but bear in mind that the main purpose of ResNet is academic, and if your game-playing prevents others using ResNet for this purpose this is against the ResNet Regulations.
Can I run a Web server on my computer connected to ResNet?
The ResNet service is designed to offer Internet access to the majority of its users, who are interested in client access to basic services such as web and email. However we realise that some users have other needs and so try to accommodate them where we can.
There are some limitations as to which ports can be used but more information can be found on our ResNet Firewall Policy page.
What about other servers, like Mail, News or FTP?
There is a set of regulations for the use of servers which specify what services you may offer. These are designed to ensure that servers operate without disrupting the network. If you are not sure whether your intended use of your computer counts as a server, ask for advice. Anyone found running a non registered server will be in breach of the ResNet Regulations.
If you want to offer a server, first check with the server regulations to see if it is allowed, or allowed with certain restrictions. You will then need to contact ResNet to register your server by telling us what services you plan to offer. Only after you have registered your server and received permission will you be allowed to operate a server.
Can I connect more than one computer to ResNet?
To ensure the security of the ResNet network we need to know which computers are connected to the network and who is responsible for them. This is why you need to register your computer on ResNet by filling in a web page form when you first connect.
When you fill in the registration form the MAC address (also known as an ethernet address) of your ethernet card is recorded and your ResNet socket will only work with this address in future. Connecting a different computer or ethernet card will disable the socket. You will then have to wait until the following day, when the socket is automatically re-enabled, or use the My ResNet where you can re-enable the port yourself.
If you replace your computer or ethernet card during the year you will need to call the ResNet Help Desk who can reset the socket to work with your new card. You will then need to fill in the online registration form again.
You can't connect several computers to your ResNet socket through a hub or switch as this will send multiple MAC addresses to the socket which will cause it to be disabled. The only way to use multiple computers with your ResNet connection is to connect them indirectly via one computer (Internet Connection Sharing), or via a router.
You must only use your ResNet connection in this way to connect computers in your room and for your use. Sharing a ResNet connection by extending the network to someone else in another room who has not subscribed to ResNet is a theft of the ResNet service and is a breach of the Regulations.
Copyrighted materials
Unless otherwise stated, all software and other information found on computers is protected by copyright. Do not attempt to copy software or any other files unless it is specifically stated that they are in the public domain or the copyright notice specifies that they may be copied. Often copyright notices specify the conditions under which the software or on-line information may be copied - for example that it may be copied for use free of charge in educational institutions only, or that it is 'shareware', that is, you may use it for a short evaluation period but you must then pay a fee to the copyright holder if you want to continue using it.
Some of the software supplied by ResNet is site-licensed to the University of Bristol. Obtaining this software through the University by or for anyone who is not a member of the University of Bristol is in breach of copyright law and may be liable to prosecution. You must remove this software from your computer when you leave the University.
Software is not the only copyrighted material you may come across. Music found on the Internet (normally as mp3 files) is often in breach of copyright rules. Making copies of, or receiving and distributing copyrighted materials to other people (eg by putting up a server or shared folder containing them) is also an offence and may be treated very seriously.
Computer Misuse
Many computers on the Internet offer public services such as World Wide Web and anonymous ftp servers. However, the fact that you can connect to a computer does not automatically give you a right to use it. If you use or attempt to use a computer that you are not authorised to use, you are committing an offence under the Computer Misuse Act 1990. If you are in any doubt as to whether you are entitled to use a computer or not, assume that you are not.
Computer misuse is not limited to the traditional image of breaking into computers used by banks or the military. Example of computer misuse include:
- Distributing viruses to other computer users.
- Use of trojans or back-door programs to gain access to the computer of another ResNet user.
- Sending a 'mail-bomb' or other denial of service attack intended to disrupt a computer system.
- Accessing password protected drives without the owners expressed permission.
- Port scanning any system without the owners expressed permission.
What you may think of as a joke or prank may be viewed more seriously by the recipient or the University authorities. In most cases the offender will be barred from using ResNet. If you suspect you have been a victim of such an attack please report the incident to the ResNet Co-ordinator.
What is port-scanning and why is it against the regulations?
Port scanning is a method of connecting to other networked computers to see what services (shared folders, web servers, etc) they are operating. For example, port scanning could be systematically scanning every computer on a network to see if it has shared folders, or scanning one individual computer to check for every possible service.
Unless you have been given permission by the owner of the computer you must not port scan or otherwise attempt to access any services provided by that computer. Testing which services a computer offers is the first step an intruder uses as part of an attempt to break into a computer and gain control of it. Security-aware users, such as those with personal firewall software, will notice connection attempts and be suspicious because without their permission in advance you should have no reason to connect to their systems.
Therefore you must never port scan a computer unless you have been given permission to do so. Under no circumstances are you permitted to scan an entire network of ResNet users. Software is available (one popular example is called Essential NetTools) that will scan whole networks looking for shared folders or other services. You must not use that feature of it, and should now understand why.
`