Re: How to make my iSeries at home available to outside programmers

Scott,

The SSL enabled telnet is definetly a better solution.  But no, I would not
allow anyone with a TN5250e client "hack into your system with impunity."
My point is that since there is no real security provided by the cable ISP
(as you are essentially "on the wire") you need to do whatever you can to
minimize the number of people who have the capability.  While I doubt there
is any system out there today that is 100% immune to hackers, my main
concern is "script kiddies" who utilize known, published exploits, and
nothing else.  Anyway, I personally like a VPN solution because of the
functionality/security combo it provides.

I will agree that your suggestion is a much better one than simply using an
exit program.

Chuck

<snip>
>
> So, you're saying you'd allow anyone willing to download a freely
> available TN5250e client hack into your system with impunity?
>
<snip>
>
> A much, much, better solution is to use the security features of the
> iSeries to protect yourself:
>
>       1) Only allow connections on port 992 (SSL enabled telnet) to get
>            through your firewall to your iSeries..
>
>       2) Assign each user a certificate that was generated on your
>            iSeries, and signed by your iSeries's certificate authority.
>
>       3) Only allow connections from TN5250e clients that present a
>            certificate that was generated by your certificate authority.
>
<snip>