RE: Denying TCP connections based on IP

Diana,

You don't mention what version of OS/400 you're on.

But OS/400 does include an IP packet filter you can turn on to do exactly what
you are requesting.

http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/rzajb/rzajbrzajb0ippacketsecuritysd.htm

HTH,
Charles

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Diana Hicks
Sent: Friday, June 29, 2007 4:14 PM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: Denying TCP connections based on IP

We have a firewall but I would like to add another layer of
security to our system (AS/400, iSeries, i5, System i, etc.).
I would like to specify a couple of IP ranges on the system
and only allow connections from those addresses. Any other
IP address that attempts to connect to the system would be
denied. This would be at the interface level and include all
services since our system is not on the internet. All
suggestions will be appreciated.

Thanks.

--
Diana Hicks
Town of Jupiter
dianah@xxxxxxxxxxxxx <mailto:dianah@xxxxxxxxxxxxx>

IBM Certified Specialist-AS/400 RPG IV Programmer IBM
Certified Specialist-AS/400 System Administrator




PLEASE NOTE: Florida has a very broad public records law.
Most written communications to or from the Town of Jupiter
officials and employees regarding public business are public
records available to the public and media upon request. Your
e-mail communications may be subject to public disclosure.
Under Florida law, e-mail addresses are public records. If
you do not want your e-mail address released in response to a
public records request, do not send electronic mail to this
entity. Instead, contact this office by phone or in writing.
The views expressed in this message may not necessarily
reflect those of the Town of Jupiter. If you have received
this message in error, please notify us immediately by
replying to this message, and please delete it from your
computer. Thank you.

This e-mail transmission contains information that is intended to be
confidential and privileged. If you receive this e-mail and you are not a
named addressee you are hereby notified that you are not authorized to read,
print, retain, copy or disseminate this communication without the consent of
the sender and that doing so is prohibited and may be unlawful. Please reply
to the message immediately by informing the sender that the message was
misdirected. After replying, please delete and otherwise erase it and any
attachments from your computer system. Your assistance in correcting this
error is appreciated.