Re: trading partner security

> Could you put the file on an intermediary system...say a Windows 2003
> server or a linux server...something like that?

i'm not worried about the iSeries (and would be more worried
about a Win server). It's the firewall tech who doesn't want to
open the range of addresses thru the firewall.
He can map inbound ftp directly to the iSeries internal ip.
We are secure there. We already process both put and get ftp's
with zero problems (until the net tech on other end does something
silly like changes their ip address).
And this data does not belong on a public outside the firewall server.
jim

----- Original Message ----- 
From: "Shannon ODonnell" <sodonnell@xxxxxxxxxxxxxxxxx>
To: "'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
Sent: Wednesday, February 18, 2004 11:34 AM
Subject: RE: trading partner security


> Could you put the file on an intermediary system...say a Windows 2003
> server or a linux server...something like that?  Then you don't have to
> worry as much about them getting onto your iSeries.
>
> Shannon O'Donnell
>
>
>
>
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jim Franz
> Sent: Wednesday, February 18, 2004 10:20 AM
> To: MIDRANGE-L@xxxxxxxxxxxx
> Subject: trading partner security
>
>
> A trading partner wants to use ftp to get a daily file off our ifs, but
> is adamently refusing to specify a single ip they are coming from,
> saying that is a security risk to them, and has given us 3
> ranges totalling over 700 addresses. I don't have a problem
> but our firewall person is freaked and refuses. I assume they
> have a herd of routers and servers in their farm.
> note: partner is defense related. 400 has decent ftp exit control.
> should i worry? jim _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>