RE: FTPS issue

First question, what version are you running? - At V7R1 I do not see where you can specify port 990.
NETSTAT *CNN - are you listening on port 990?

What did you setup for passive ports? You may have to add your public IP in the passive settings on your firewall for your FTP.

With FileZilla I can connect to port 990 on my iSeries V6R1 by using require implicit FTP over TLS.

did you configure a certificate to use in DCM?


--
Chris Bipes
Director of Information Services
CrossCheck, Inc.


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Smith, Mike
Sent: Wednesday, June 07, 2017 1:28 PM
To: Midrange Systems Technical Discussion (midrange-l@xxxxxxxxxxxx) <midrange-l@xxxxxxxxxxxx>
Subject: FTPS issue

We don't typically let people FTP into our machines, however we do have 2 software providers that do.
One of them has decided they want to do FTPS on port 990.

We have been working on this for a week now with no luck. They are now getting through our firewall, but I'm not seeing anything obvious that says they are at least getting to our IBM I.

My firewall guy has been doing some testing and he says when he tries to connect via port 990,
He gets

No connection could be made because the target machine actively refused it.
Connection failed.
I have checked CHGFTPA and *SSL is set to *YES

I don't have a clue where to look now to help diagnose this problem.

Any help is greatly appreciated.

MIke