mahaska.org

  • Increase font size
  • Default font size
  • Decrease font size

Acceptable Use Policy

Print PDF
All Internet Service customers should read this document. You are responsible for the policy written here, and your account WILL BE DISABLED WITHOUT WARNING if you violate it.

(Information about reporting abuse of this policy is provided below.)


This Internet Access Service sets forth an Acceptable Use Policy (AUP) with the intent of protecting our service, our customers, and other users of the Internet from potentially abusive actions taken by our customers. The following policy is non-exclusive; any action about which there is doubt should be referred to Mahaska Communication Group, LLC (MCG) for evaluation. We may alter this policy from time to time as need dictates.

Statement of Responsibility

  • Each Internet account on this service has a password that is the key to gain access to the account. The customer who registered the account is solely responsible for all access and actions taken with regard to the account. It is the account owner's responsibility to safeguard the account password and to ensure that Acceptable Use Policies are honored. We will hold the account owner responsible for any violations of the AUP.
  • Any customers directly attached to this Internet Access Service are expected to adhere to the Acceptable Use Policies. The individual who agreed to direct-connect service is responsible for educating site users on acceptable use policies. Violations of the AUP by directly attached sites will be referred to the connection purchaser for resolution. The connection purchaser will be held responsible for any violations of the AUP.
  • This Internet Access Service enforces these policies with respect to our customers only. We are not responsible for abusive actions which originate from other sites or networks on the Internet.
  • Each customer agrees that the Internet Access Service and any entity or person connected or affiliated therewith may release the customer's electronic communications and/or account access records to the authorities in connection with a criminal investigation or in response to a subpoena or court order, should that information be requested and is available.

Acceptable Use: Network

Acceptable use of the this Internet Access Service network facilities does NOT include:

  • Attempting to circumvent user authentication or security of any host, network, or account on this Internet Access Service systems or the Internet at large ("cracking").
  • Use of this Internet Access Service systems or networks (willfully or negligently) in a manner that encumbers disk space, processors, bandwidth, or other system resources so as to interfere with others' normal use of services on this Internet Access Service or other systems and networks ("denial of service" attack).
  • Activities which violate local, state, or federal statutes.

Acceptable Use: Domain Names

This Internet Access Service provides domain name service for web page customers. Keeping registry information updated and accurate is the responsibility of the domain holder and not this Internet Access Service. Acceptable use of this domain name service does NOT include:

  • Falsifying or omitting valid domain contact information, including the administrative, technical, zone, and billing contacts.

Acceptable Use: Email

Acceptable use of Email does NOT include:

  • Sending unsolicited mass mailings of any nature, including those with a "negative option" for continuation. The negative option is inviting those who do not wish to receive more email to reply to you.
  • Sending a large number of email messages, or singularly large email messages, to a single address in order to flood someone's mailbox.
  • Forging email headers to obscure the true originator of the message.
  • Creating or participating in pyramid schemes or chain letters.
  • Sending harassing email, either by language, size, or frequency. This includes sending email (or real time) messages to a person who has asked explicitly that you do not.
  • Activities which violate local, state, or federal statutes.

Acceptable Use: Usenet

Acceptable use of this Internet Access Service Usenet News service does NOT include:

  • Posting unsolicited messages to a large number of Usenet newsgroups either by cross-posting or posting to individual groups ("spamming").
  • Attempting to cancel, supersede, or otherwise interfere with Usenet posts other than one's own.
  • Blatant posting of articles which violate the named charter for specific newsgroups.
  • Publishing someone's real-world data (such as phone number, address, social security number, etc.) in such a way as to cause the person trouble or to incite others to do so.
  • Forging Usenet header information to obscure the true originator of the message.
  • Activities that violate local, state, or federal statutes.

Acceptable Use: Internet Access

  • Dial-up connections to this Internet Access Service that are idle for 30 minutes or longer will be disconnected. Idle time is defined as a period during which no input or output is sent or received across the modem connection.
  • Dial-up connections to this Internet Access Service may be disconnected after several hours of continuous access. "Unlimited Access" does not mean "continuous access". This policy is enforced to keep dial-up access affordable to all subscribers
  • Multiple simultaneous logins to a single dial-up account to this Internet Access Service are prohibited.
  • Use of this Internet Access Service dial-up service as a dedicated modem connection through use of redialers and idle-time traffic generators is prohibited.
  • Hi-speed access services such as DSL and wireless shall be assigned changing (dynamic) IP addresses unless otherwise specified in customer agreement. We reserve the right to change these IP numbers.
  • Customer is forbidden from using Internet access for resale purposes or from supplying this Internet access to other locations, customers, people, businesses or entities.
  • Bandwidth speeds for dial-up and hi-speed access services will not exceed limits set by F.C.C. regulations and are the maximum available download speeds for that particular level of service. Actual speeds will vary depending on service package selected and factors such as customer's computer configuration and performance, overall Internet traffic, weather and/or other factors.

Acceptable Use: Web Sites

Acceptable use of this Internet Access Service web space does NOT include:

  • Distribution of pornographic or otherwise indecent or offending materials.
  • Distribution of restricted software or materials in violation of copyrights or distribution licenses.
  • Distribution of materials which violates local, state, or federal statutes.

This Internet Access Service reserves the right to restrict or terminate service without refund in the event of an AUP violation. This Internet Access Service also reserves the right to take action on abuse which is not specifically named in this AUP at the sole discretion of this Internet Access Service. Use of this Internet Access Service systems and network constitutes understanding and agreement of this policy.

Reports of Abuse

This Internet Access Service provides an email address for use in reporting abusive activities originating from our customers as outlined in this Acceptable Use Policy. Please note, abuse originating from customers other than our own cannot be handled by us. Report those instances to the provider/site who has authority over the abusive user.

* When reporting email or Usenet abuse, include a FULL copy of the message, including headers. This information is required in order for any action to be taken.
* When reporting other types of abuse, include details such as log files documenting the incident. We cannot act on your word alone, we must have documented proof of an incident.
* Send your report in email to This e-mail address is being protected from spambots. You need JavaScript enabled to view it . Due to the number of reports submitted pertaining to a single abuse incident, it is not always possible for us to respond to each and every report.

NOTE: The action taken on abuse reports will be at the sole discretion of this Internet Access Service. Our intent is NOT to be The Net Police, but to simply do our part to insure quality access and use of the Internet to all of our customers and to the Internet community at large.

Last Updated on Monday, 06 October 2008 14:33  

Support Information

Your IP address is: 38.107.179.207

Have Postini?

Spam / Virus Protection

Our spam filter is completely customizable by you. It catches spam and viruses before they enter your system and attack sensitive information. The cost is only $0.95 per month per email account and is an inexpensive way for you to protect your data. Call or email to sign up today!

Postini

 

 

 

Advisories

Computer Security Tips

  • ST06-004: Avoiding the Pitfalls of Online Trading
    Online trading can be an easy, cost-effective way to manage investments. However, online investors are often targets of scams, so take precautions to ensure that you do not become a victim.

    What is online trading?

    Online trading allows you to conduct investment transactions over the internet. The accessibility of the internet makes it possible for you to research and invest in opportunities from any location at any time. It also reduces the amount of resources (time, effort, and money) you have to devote to managing these accounts and transactions.

    What are the risks?

    Recognizing the importance of safeguarding your money, legitimate brokerages take steps to ensure that their transactions are secure. However, online brokerages and the investors who use them are appealing targets for attackers. The amount of financial information in a brokerage's database makes it valuable; this information can be traded or sold for personal profit. Also, because money is regularly transferred through these accounts, malicious activity may not be noticed immediately. To gain access to these databases, attackers may use Trojan horses or other types of malicious code (see Why is Cyber Security a Problem? for more information).

    Attackers may also attempt to collect financial information by targeting the current or potential investors directly. These attempts may take the form of social engineering or phishing attacks (see Avoiding Social Engineering and Phishing Attacks for more information). With methods that include setting up fraudulent investment opportunities or redirecting users to malicious sites that appear to be legitimate, attackers try to convince you to provide them with financial information that they can then use or sell. If you have been victimized, both your money and your identity may be at risk (see Preventing and Responding to Identity Theft for more information).

    How can you protect yourself?

    • Research your investment opportunities - Take advantage of resources such as the U.S. Securities and Exchange Commission's EDGAR database and your state's securities commission (found through the North American Securities Administrators Association) to investigate companies.
    • Be wary of online information - Anyone can publish information on the internet, so try to verify any online research through other methods before investing any money. Also be cautious of "hot" investment opportunities advertised online or in email.
    • Check privacy policies - Before providing personal or financial information, check the website's privacy policy. Make sure you understand how your information will be stored and used (see Protecting Your Privacy for more information).
    • Conduct transactions on devices you control - Avoid conducting transactions on public resources such as internet kiosks, computers in places like libraries, and other shared computers and devices. Other users may introduce security risks.
    • Make sure that your transactions are encrypted - When information is sent over the internet, attackers may be able to intercept it. Encryption prevents the attackers from being able to view the information.
    • Verify that the website is legitimate - Attackers may redirect you to a malicious website that looks identical to a legitimate one. They then convince you to submit your personal and financial information, which they use for their own gain. Check the website's certificate to make sure it is legitimate (see Understanding Web Site Certificates for more information).
    • Monitor your investments - Regularly check your accounts for any unusual activity. Report unauthorized transactions immediately.
    • Use strong passwords - Protect your computer, mobile devices, and accounts with passwords that cannot easily be guessed (see Choosing and Protecting Passwords for more information). Use different passwords for each account.
    • Use and maintain anti-virus software - Anti-virus software recognizes and protects your computer against most known viruses. However, because attackers are continually writing new viruses, it is important to keep your virus definitions current (see Understanding Anti-Virus Software for more information).
    • Use anti-spyware tools - Spyware is a common source of viruses, and attackers may use it to access information on your computer. You can minimize the number of infections by using a legitimate program that identifies and removes spyware (see Recognizing and Avoiding Spyware for more information).
    • Keep software up to date - Install software patches so that attackers can't take advantage of known problems or vulnerabilities (see Understanding Patches for more information). Enable automatic updates if the option is available.
    • Evaluate your security settings - By adjusting the security settings in your browser, you may limit your risk of certain attacks (see Evaluating Your Web Browser's Security Settings for more information).
    The following sites offer additional information and guidance:
    Author: Mindi McDowell
    Produced 2006, 2011 by US-CERT, a government organization. Terms of use
    Last updated April 7, 2011

    This product is provided subject to the Notification as indicated here: http://www.us-cert.gov/legal.html#notify

  • ST11-001: Holiday Traveling with Personal Internet-Enabled Devices
    The internet is at our fingertips with the widespread use of internet-enabled devices such as smart phones and tablets. When traveling and shopping anytime, and especially during the holidays, consider the wireless network you are using when you complete transactions on your device.

    Know the risks

    Your smart phone, tablet, or other device is a full-fledged computer. It is susceptible to risks inherent in online transactions. When shopping, banking, or sharing personal information online, take the same precautions with your smart phone or other device that you do with your personal computer — and then some. The mobile nature of these devices means that you should also take precautions for the physical security of your device (see Protecting Portable Devices: Physical Security for more information) and consider the way you are accessing the internet.

    Do not use public Wi-Fi networks

    Avoid using open Wi-Fi networks to conduct personal business, bank, or shop online. Open Wi-Fi networks at places such as airports, coffee shops, and other public locations present an opportunity for attackers to intercept sensitive information that you would provide to complete an online transaction.

    If you simply must check your bank balance or make an online purchase while you are traveling, turn off your device's Wi-Fi connection and use your mobile device's cellular data internet connection instead of making the transaction over an unsecure Wi-Fi network.

    Turn off Bluetooth when not in use

    Bluetooth-enabled accessories can be helpful, such as earpieces for hands-free talking and external keyboards for ease of typing. When these devices are not in use, turn off the Bluetooth setting on your phone. Cyber criminals have the capability to pair with your phone's open Bluetooth connection when you are not using it and steal personal information.

    Be cautious when charging

    Avoid connecting your mobile device to any computer or charging station that you do not control, such as a charging station at an airport terminal or a shared computer at a library. Connecting a mobile device to a computer using a USB cable can allow software running on that computer to interact with the phone in ways that a user may not anticipate. As a result, a malicious computer could gain access to your sensitive data or install new software. Don't Fall Victim to Phishing Scams If you are in the shopping mode, an email that appears to be from a legitimate retailer might be difficult to resist. If the deal looks too good to be true, or the link in the email or attachment to the text seems suspicious, do not click on it!

    What to do if your accounts are compromised

    If you notice that one of your online accounts has been hacked, call the bank, store, or credit card company that owns your account. Reporting fraud in a timely manner helps minimize the impact and lessens your personal liability. You should also change your account passwords for any online services associated with your mobile device using a different computer that you control. If you are the victim of identity theft, additional information is available from http://www.idtheft.gov/.

    For even more information about keeping your devices safe, read Cybersecurity for Electronic Devices.

    Last updated December 19, 2011

    This product is provided subject to the Notification as indicated here: http://www.us-cert.gov/legal.html#notify

  • ST06-001: Understanding Hidden Threats: Rootkits and Botnets
    Attackers are continually finding new ways to access computer systems. The use of hidden methods such as rootkits and botnets has increased, and you may be a victim without even realizing it.

    What are rootkits and botnets?

    A rootkit is a piece of software that can be installed and hidden on your computer without your knowledge. It may be included in a larger software package or installed by an attacker who has been able to take advantage of a vulnerability on your computer or has convinced you to download it (see Avoiding Social Engineering and Phishing Attacks for more information). Rootkits are not necessarily malicious, but they may hide malicious activities. Attackers may be able to access information, monitor your actions, modify programs, or perform other functions on your computer without being detected.

    Botnet is a term derived from the idea of bot networks. In its most basic form, a bot is simply an automated computer program, or robot. In the context of botnets, bots refer to computers that are able to be controlled by one, or many, outside sources. An attacker usually gains control by infecting the computers with a virus or other malicious code that gives the attacker access. Your computer may be part of a botnet even though it appears to be operating normally. Botnets are often used to conduct a range of activities, from distributing spam and viruses to conducting denial-of-service attacks (see Understanding Denial-of-Service Attacks for more information).

    Why are they considered threats?

    The main problem with both rootkits and botnets is that they are hidden. Although botnets are not hidden the same way rootkits are, they may be undetected unless you are specifically looking for certain activity. If a rootkit has been installed, you may not be aware that your computer has been compromised, and traditional anti-virus software may not be able to detect the malicious programs. Attackers are also creating more sophisticated programs that update themselves so that they are even harder to detect.

    Attackers can use rootkits and botnets to access and modify personal information, attack other computers, and commit other crimes, all while remaining undetected. By using multiple computers, attackers increase the range and impact of their crimes. Because each computer in a botnet can be programmed to execute the same command, an attacker can have each of them scanning multiple computers for vulnerabilities, monitoring online activity, or collecting the information entered in online forms.

    What can you do to protect yourself?

    If you practice good security habits, you may reduce the risk that your computer will be compromised:

    • Use and maintain anti-virus software - Anti-virus software recognizes and protects your computer against most known viruses, so you may be able to detect and remove the virus before it can do any damage (see Understanding Anti-Virus Software for more information). Because attackers are continually writing new viruses, it is important to keep your definitions up to date. Some anti-virus vendors also offer anti-rootkit software.
    • Install a firewall - Firewalls may be able to prevent some types of infection by blocking malicious traffic before it can enter your computer and limiting the traffic you send (see Understanding Firewalls for more information). Some operating systems actually include a firewall, but you need to make sure it is enabled.
    • Use good passwords - Select passwords that will be difficult for attackers to guess, and use different passwords for different programs and devices (see Choosing and Protecting Passwords for more information). Do not choose options that allow your computer to remember your passwords.
    • Keep software up to date - Install software patches so that attackers can't take advantage of known problems or vulnerabilities (see Understanding Patches for more information). Many operating systems offer automatic updates. If this option is available, you should enable it.
    • Follow good security practices - Take appropriate precautions when using email and web browsers to reduce the risk that your actions will trigger an infection (see other US-CERT security tips for more information).

    Unfortunately, if there is a rootkit on your computer or an attacker is using your computer in a botnet, you may not know it. Even if you do discover that you are a victim, it is difficult for the average user to effectively recover. The attacker may have updated files on your computer, so simply removing the malicious files may not solve the problem, and you may not be able to safely trust a prior version of a file. If you believe that you are a victim, consider contacting a trained system administrator.

    As an alternative, some vendors are developing products and tools that may remove a rootkit from your computer. If the software cannot locate and remove the infection, you may need to reinstall your operating system, usually with a system restore disk that is often supplied with a new computer. Note that reinstalling or restoring the operating system typically erases all of your files and any additional software that you have installed on your computer. Also, the infection may be located at such a deep level that it cannot be removed by simply reinstalling or restoring the operating system.


    Author: Mindi McDowell
    Produced 2006 by US-CERT, a government organization. Terms of use
    Last updated September 30, 2008

    This product is provided subject to the Notification as indicated here: http://www.us-cert.gov/legal.html#notify