Boilerplate Contracts

From: Matt Stern (sternm_at_comprehensive.com)
Date: 12/28/04

  • Next message: Sebastian: "Re: Lots of incoming traffic on UDP 1026 and UDP 1027?" 
    Date: Tue, 28 Dec 2004 14:45:50 -0500
To: security-basics@lists.securityfocus.com

    Hello all:

    I need to put together an "authorization form" for clients, to allow us
    to do things like port scans, penetration testing, etc.

       1. Is there a boilerplate contract out there somewhere that we can
    use as a starting point?
       2. Is there a source for these kind of documents?
       3. Anybody have particular experience with any language that can
    either prevent litigation, or save your "bacon" in case there is any?

    Thank you all. 

    -- 
Matthew H. Stern, CCP/CDP, sternm@comprehensive.com
Serving the IT industry since 1976
Comprehensive Computer Services Inc.
www.comprehensive.com
Phone: 631 755-2250, Fax 755-2254
560 Broad Hollow Road, Melville NY 11747
  • Next message: Sebastian: "Re: Lots of incoming traffic on UDP 1026 and UDP 1027?"

    Relevant Pages

    • Re: adding machine to domain with NATed IPs
      ... sounds that the DCs are not reaching the clients ... weight 100, port 389, target srv5.mydomain.local ...
      (microsoft.public.windows.server.active_directory)
    • Re: adding machine to domain with NATed IPs
      ... sounds that the DCs are not reaching the clients ... Type: SRV (Service location) ... weight 100, port 389, target srv5.mydomain.local ...
      (microsoft.public.windows.server.active_directory)
    • Re: DDoS to microsoft sites
      ... The primary difference between the two clients is that the first port scan I ... > - netbios (brute force attack on Administrator account) ... I'm guessing that the SQL server is the infection vector in both these ...
      (Incidents)
    • Re: Help need desperately!
      ... Changing from port 80 is not required. ... Inventory information began flowing properly. ... All of the clients seemed to install with the new ... >> found our problem to be in our TCP port configuration on the Server. ...
      (microsoft.public.sms.inventory)
    • Re: adding machine to domain with NATed IPs
      ... sounds that the DCs are not reaching the clients or vice versa? ... weight 100, port 389, target srv5.mydomain.local ...
      (microsoft.public.windows.server.active_directory)