RE: Turn off PING server on AS/400

Although I haven't done it for ICMP, OpsNav Packet rules would be the place if 
it's to be done by the AS/400. The 'firewall' works very well; extremely easy 
to lock yourself out while you're still in OpsNav and setting the rules.

Study the subject thoroughly before firewalling yourself in a corner.

Tom Liotta

midrange-l-request@xxxxxxxxxxxx wrote:

>   9. RE: Turn off PING server on AS/400 (DeLong, Eric)
>
>Or use Ops Navigator (iSeries Navigator, whatever...) to setup Packet
>rules....  I think you would want to set a filter on ICMP service....
>
>-----Original Message-----
>
>There used to be an IBM firewall product for the iseries.  Dropped a few 
>releases back.
>Current strategy is:
>1-External appliance (such as a cisco firewall)
>2-Linux partition
>3-Integrated xseries server
>
>
>I have an AS/400 that I want to put on the Internet for a specific 
>purpose.
>I only want to have one port open, which I will handle with a socket 
>server
>program. I will turn all other TCP/IP servers off, including telnet.
>
>Are you taking about an  external firewall, such as router? I wasn't
>planning on using a router but I could if I have to.
>
>Or is there a firewall on the AS/400 I can use?
>
>Albert York 
>
>                 -----Original Message-----
>                 Hi Albert,
>
>                 > I need to be able to have the AS/400 not respond to 
>PINGs without
>shutting
>                 > down TCP/IP.
>                 >
>                 > I looked in the archives but I can't see anything about 
>it.
>                 > Is there a simple way to do this?
>
>                 Ping is a little bit different from other TCP/IP 
>applications, in
>that
>                 there's no "ping server."  Ping is implemented at a 
>lower-level,
>it's part
>                 of the TCP/IP stack itself.
>
>                 The best way to disable it is by blocking ICMP echo 
>packets with a
>                 firewall.
>
>                 Can I ask why you want to disable it?


-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com



__________________________________________________________________
Introducing the New Netscape Internet Service. 
Only $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need. 

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp