RE: Socks server port

I suppose that changing the SOCKS server port back to 1080 is out of the 
question.

In that case, port tunneling may be the answer.

SOCAT is a port tunneling utility on *nix. The nice thing about SOCAT
is that its AIX binary runs on the iSeries in the PASE environment, 
with no recompilation.

Try this, either in PASE, or Linux, or any appropriate unix:

socat TCP4-LISTEN:2121 SOCKS4:<socks-server>:<ftp-host>:21,socksport=8090

Then, in your iSeries FTP client run 

FTP RMTSYS('socat-server') PORT(2121)            

If you run SOCAT in PASE, then the FTP request would look like

FTP RMTSYS('127.0.0.1') PORT(2121)

SOCAT for AIX that runs on iSeries can be found at 
http://aixpdslib.seas.ucla.edu/packages/socat.html

To run socat, place the binary file in an iSeries IFS folder, and execute

CALL PGM(QP2SHELL2)
     PARM('socat' 
          'TCP4-LISTEN:2121' 
          'SOCKS4:<socks-server>:<ftp-host>:21,socksport=8090')

SOCAT is verified to run in 5.1 and 5.2. 
I am not sure about 4.5, and did not try the SOCKS redirection yet.

Regards, 
Shalom Carmel
-----------------------
www.venera.com - Exposing iSeries insecurity


----- Original Message -----
> date: Wed, 18 May 2005 17:28:55 +0100
> from: Marc Rauzier 
> subject: RE: Socks server port
> 
> Le mer. 18 mai 2005 14:44:02, Elvis Budimlic יcrivait:
> 
> > NESTAT *CNN
> > F14
> > 
> > will give you the port numbers.  
> > 
> > However, I am a bit confused about your setup.  Your socks server
> > is running on the iSeries?  Then its port number should show in
> > the WRKSRVTBLE and could be changed. No?
> > 
> 
> Alas, no and this is the point. The socks server is *not* running on 
> the iSeries. It is running somewhere on the intranet network to allow 
> the FTP traffic from the iSeries to go out on the internet network. 
> 
> The FTP server on the internet server is listening on the classical 
> port (21). But the iSeries when running the FTP client session, can 
> only reach this FTP server by using the socks server that is listening 
> on the 8090 port.
> 
> I have aleardy used this kind of setup (for a telnet session, but it is 
> the same), and I know that when accessing to a server thru a socks 
> server, the OS400 uses the standard socks server port which is 1080. 
> So, my question is : is it possible to replace 1080 by 8090 and if yes, 
> where can I do it ?
> 
> WRKSRVTBLE is used for servers that runs on the iSeries and even if it 
> was not the case, I do not find any entry for any socks service.
> 
> 
> > Elvis
> > 
> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx
> > [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Marc Rauzier
> > Sent: Wednesday, May 18, 2005 1:38 AM
> > To: Midrange Systems Technical Discussion
> > Subject: RE: Socks server port
> > 
> > Le mar. 17 mai 2005 18:05:01, Wilt, Charles יcrivait:
> > 
> >> WRKSRVTBLE ??
> >> 
> > 
> > Thank you Charles.
> > 
> > Well, I was sure not to write down this question in a fine english
> > :-) 
> > 
> > In my case, the AS400 is not the server, it is the client. It runs
> > an FTP session to a FTP server thru a socks server (the socks
> > server can only be configured with iSeries Navigator by
> > right-clicking Properties on the TCP/IP configuration in the
> > Network panel and filling the right informations in the SOCKS
> > tab). The WRKSRVTBLE would help me if the AS400 have been FTP
> > server which is not the case. 
> > 
> > 
> >> Charles Wilt
> >> iSeries Systems Administrator / Developer
> >> Mitsubishi Electric Automotive America
> >> ph: 513-573-4343
> >> fax: 513-398-1121
> >>  
> >> 
> >>> -----Original Message-----
> >>> From: midrange-l-bounces@xxxxxxxxxxxx
> >>> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Marc
> >>> Rauzier Sent: Tuesday, May 17, 2005 11:31 AM
> >>> To: midrange-l@xxxxxxxxxxxx
> >>> Subject: Socks server port
> >>> 
> >>> 
> >>> Hello everybody
> >>> 
> >>> When configuring the socks client on an AS400 for a socks 
> >>> server (I want to 
> >>> run FTP thru a socks server from the AS400), I do not see a 
> >>> way to change 
> >>> the port on which the socks server listens.
> >>> 
> >>> Does someone know if it is possible (changing from 1080 which 
> >>> is, I guess, 
> >>> the default and used value to, let's say 8090) and, if yes, how
> >>> ? 
> >>> 
> >>> Note : OS400 V4R5
> >>> 
> > 
> > 
> 
> 
> 
> -- 
> Cordialement/Best regards
> Marc Rauzier
> 
> Opinions I stated here are my own.
>