Re: Grumble...

In article <JMEAKJHIIBLMDGOOGMGAMEMHCBAA.joepluta@PlutaBrothers.com>,
Joe Pluta <joepluta@PlutaBrothers.com> writes
>> 4. Your AS/400 security won't let the packets return (i.e. is blocking
>> them).
>
>Yeah, but where would this security be?  I don't find anything anywhere that
>looks like security.  There are no system values that seem to be
>appropriate, nor are there any settings in the line or in the TCP/IP
>configuration.

Good question - I don't know (I do know I can FTP out from my AS/400,
but not ping, f'instance - but I think that's because the AS/400 doesn't
know about the proxy - which is also the firewall). I suspect AS/400
security because it tends to insist you switch things on (like routing)
rather than off (There are some exceptions to this, like FTP exit
points).

>
>
>> My AS/400s have 192.168.* addresses, and FTP data out to an external
>> machine daily. They have to log in to the firewall to do it, but so do
>> the windows and Unix boxes.
>
>This is an interesting statement.  None of my boxes "logs in to the
>firewall", since I don't really have a firewall per se, just my router.  The
>router is set up to pass packets from my 10. addresses out to the world as
>if they were coming from my router (at least that's how I assume it's
>happening).  That's just a "natural" part of the NAT processing, AFAIK.

Have you asked in Ignite/400? I'm sure those guys know the answer (I
haven't got time to research right now).

-- 
Steve
  -----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCM/B$ d++(-) s+:+ a+ C++ UL++ L+ P+ W++ N+++ K w--- O V 
PS+++ PE- t+ 5++ X- R* tv+ b+++ DI++ G e h---- r+++ z++++
  ------END GEEK CODE BLOCK------
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---