RE: IIS to as/400 odbc

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

I know you didn't ask, but I have to say this: an application architecture
that opens your production machine to ODBC access from the DMZ is defeating
much of the purpose of having a firewall in the first place.

There should be no "standard" access from the DMZ to protected machines.
There should always be some manner of proprietary protocol.  Without that,
you've degraded your security to the point of simple password hacking.

Joe


> -----Original Message-----
> From: midrange-l-admin@midrange.com
> [mailto:midrange-l-admin@midrange.com]On Behalf Of SCarter@rsrcorp.com
> Sent: Tuesday, August 14, 2001 4:17 PM
> To: midrange-l@midrange.com
> Subject: IIS to as/400 odbc
>
>
>
> We have developed a web app that needs ODBC access to our iSeries.  What
> the problem is
> is that the Web server is in the DMZ and obviously the iSeries ( still
> bothers me) is on the inside.
> We are not able to get the web app to work now that it is on the DMZ our
> server guy needs to know
> the port ( or whatever else) he needs to open up on the CISCO firewall.