Re: data transfer protection from FTP

I was very reluctant to run the ftp server on the AS400 because 
of security, and used to start and stop the server for each transfer. 
David Stanfield of Focal Systems suggested a better option, which I
have found very satisfactory.
The AS400 can act as an FTP client, and you can send and receive files to 
an FTP server from a CL program.
All you have to do is run an FTP server on a PC on your network, and set it
up to use a folder on a mapped network drive. Then you can use CL scripts
to tranfer files for users under program control, so it is easy to manage 
the security. 
The most popular use by my users is to FTP spoolfiles for import into to
excel. 
It is also possible to set up a folder structure in the network FTP
folders, with additional network access restrictions, eg separate folders
for accounts,
hr, engineering, sales etc.
There are a number of FTP servers for Windows around. I use WarFTP
(www.jgaa.com) on Win95, and have found it stable and unobtrusive.
Alternatively you could run an FTP server on your network server.


At 17:31 20/09/2000 -0400, you wrote:
>We use a profile with
>Initial program = *NONE
>Initial menu = *SIGNOFF
>Limit capabilites = *YES.
>This lets the FTP run but prevents anyone from using this profile get a
>signon session.
>
>
>> I have a similar concern, and if it's already been discussed, let me
>> apologize ... I'm interested in recommendations for securing batch FTPs
>> where it is not unusual to store IDs with non-expiring passwords in a
>> readable file ... suggestions, please.
>>
>> +---
>> | This is the Midrange System Mailing List!
>> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>> | To unsubscribe from this list send email to
>MIDRANGE-L-UNSUB@midrange.com.
>> | Questions should be directed to the list owner/operator:
>david@midrange.com
>> +---
>>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator: david@midrange.com
>+---
>
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---