Re: Securing port 23

Funny that the IBM Infocenter makes no mention of a Firewall being built in...

I know that IBM used to offer 5769-FW1 Firewall for OS/400, (which
actually ran on an integrated PC server) but that was dropped back in
v5r1 or so...

I assume you're talking about the built in packet filter
functionality....while it's true that originally all that a firewall
offered was packet filtering, we've come a longs ways from that. It's
a disservice to say that packet filtering == firewall in this day and
age. I know I sure wouldn't want an system running IBM i on the net
with nothing between it and the net but the built in packet filter.

Charles


On Wed, Aug 25, 2010 at 10:45 AM, Jim Oberholtzer <midrangel@xxxxxxxxxx> wrote:

A Cisco 5505 is about $450 US right now and would do the trick very
nicely, however, have you considered that the IBM i has a firewall built
in?  You can achieve all the things that have been discussed at no cost,
with a combination of 1) locking the real firewall so no telnet traffic
goes through it (most of my clients have done this), 2) putting the
address and port rules into the IBM i, and 3) if needed, put up a telnet
exit program if it is still warranted.

The IBM i firewall option, free.  Takes about 20 minutes to do and works
as well as any other firewall solution.

Jim Oberholtzer
CEO/Chief Technical Architect
Agile Technology Architects, LLC


On 8/25/2010 7:15 AM, Mike Cunningham wrote:

They could buy another firewall and place it between the network and the iSeries.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.