Re: Ports to block to limit the use of Client access DatatransferFacility

["John Candidi" <jacandidi@xxxxxxxxxxxxxxxxxxxx>]

We found that 8471 and 9471 block ODBC and Data transfer capabilities
  ----- Original Message ----- 
  From: Wilt, Charles 
  To: Midrange Systems Technical Discussion 
  Sent: Monday, May 23, 2005 2:32 PM
  Subject: RE: Ports to block to limit the use of Client access DatatransferFacility 


  There isn't just a port for Client Access "data transfer".

  The data transfer uses the regular remote database access ports.

  Unless you don't intend to offer any kind of data access, ie. ODBC, OLEDB, JDCD, DRDA...then you need to look elsewhere.

  Exit point program may be of some use, but the fact of the matter is you need working object level security to secure the iSeries.


  Charles Wilt
  iSeries Systems Administrator / Developer
  Mitsubishi Electric Automotive America
  ph: 513-573-4343
  fax: 513-398-1121
   

  > -----Original Message-----
  > From: midrange-l-bounces@xxxxxxxxxxxx
  > [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of John Candidi
  > Sent: Monday, May 23, 2005 2:19 PM
  > To: midrange-l@xxxxxxxxxxxx
  > Subject: Ports to block to limit the use of Client access Data
  > transferFacility 
  > 
  > 
  > 
  > 
  > Does anyone know which port on this list: (you'l have to 
  > paste the 2nd line to the end of the address on the first 
  > line to get the correct site)
  > 
  > http://www-912.ibm.com/s_dir/slkbase.nsf/1ac66549a214021886256
  > 80b0002037e/ac
  > c12fda96496e4b8625668f007ab75f?OpenDocument&Highlight=0,firewall
  > 
  > Needs to be blocked to limit the use of data transfer 
  > functionality or even
  > how to limit by user profile on the iSeries.
  > 
  > -- 
  > This is the Midrange Systems Technical Discussion 
  > (MIDRANGE-L) mailing list
  > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
  > To subscribe, unsubscribe, or change list options,
  > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
  > or email: MIDRANGE-L-request@xxxxxxxxxxxx
  > Before posting, please take a moment to review the archives
  > at http://archive.midrange.com/midrange-l.
  > 
  > 

  -- 
  This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
  To post a message email: MIDRANGE-L@xxxxxxxxxxxx
  To subscribe, unsubscribe, or change list options,
  visit: http://lists.midrange.com/mailman/listinfo/midrange-l
  or email: MIDRANGE-L-request@xxxxxxxxxxxx
  Before posting, please take a moment to review the archives
  at http://archive.midrange.com/midrange-l.