Re: Anti-virus for i5OS

["Lukas Beeler" <lukas.beeler@xxxxxxxxxxxxxxxx>]

On Mon, Apr 7, 2008 at 12:08 AM, Joe Pluta <joepluta@xxxxxxxxxxxxxxxxx> wrote:
> Lukas Beeler wrote:
>  > All these shops out there that are running unencrypted telnet and ftp
>  > to their IBM i instances BADLY need any kind of security advice they
>  > can get.
>  I don't know about Telnet - are you saying people opening up Port 23 on
>  your System i to a public IP address?  Then yeah, you got issues!  Your

Yeah, but even internally. Without specialized networking equipment,
it is easily possible to intercept all traffic going to/from your IBM
i instances. So it's trivial for anyone to figure out all the
passwords - this can be used for privilege escalation.

SSL support for telnet and ftp is available on IBM i, but it not used
that often.

>  security consultant.  And you'd need that if you were doing it via your
>  PC as well; it's the nature of FTP not the System i.

Yeah. And that's kinda my point - as soon as you connect your IBM i to
the network, you open a whole can of worms that need to be taken care
of. And often isn't!

It gets even worse when you run web apps on it.