Re: TN5250 *through* a firewall?

[David Gibbs <david@xxxxxxxxxxxx>]

The problem I've encountered is, when trying to access an AS/400 that's
behind FW-1, the 5250 control negotiation occurrs immedately... not
allowing the the FW-1 prompts (userid & password) to be displayed.

The Shareware 5250 clients are much more relaxed about this... and allow
the prompts to be displayed.  

david

At 12:11 AM 4/8/98 , Vincent LeVeque wrote:
>I don't think telnet 5250 is "natively" supported by Firewall-1.  If it uses
>the same port and protocol (TCP vs. UDP) as regular telnet, there should be
>no problem.  Otherwise Firewall-1 lets you configure custom services fairly
>easily.  This flexibility is one of the strengths (and great temptations) of
>Firewall-1.
>
>No client or browser configuration is necessary - Socks is not involved.  
>
>Firewall-1's controls use "stateful inspection" - basiocally a high-powered
>packet filter (like a router) except they maintain "memory" of the state of
>a connection & can inspect the contents of a packet.  It is fast & pretty
>much invisible to the end user.
>
>- VL
>
>
>
>
>At 06:22 PM 4/7/98 -0500, you wrote:
>>I think I should clarify something... I want to get to an AS/400 that's
>>behind a firewall (FIREWALL-1)... I telnet to the appropriate address and
>>the firewall asks for a user id & password, then it let's me through to the
>>as400.
>>
>>david
>>
>>--
>>| Internet: david@midrange.com
>>| WWW:      http://www.midrange.com/david
>>|
>>| ... A man can move mountains, a world can be turned,
>>| and the greatest of distances easily spanned,
>>| When the strength that's invested in making a fist
>>| is transformed into shaking a hand.
>>|
>>|                     - DMRoth
>>|
>>| Fight Spam! Join CAUCE! == http://www.cauce.org/
>>
>>+---
>>| This is the Midrange System Mailing List!
>>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>>| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
>>| Questions should be directed to the list owner/operator:
david@midrange.com
>>+---
>>
>>
>
>
>                  |-------------------------------------------------|
>                  |               Vincent LeVeque                   |
>                  |  Science Applications International Corporation |
>                  |   Center for Information Security Technology    |
>                  |     222 North Sepulveda Boulevard Suite 1740    |
>                  |        El Segundo, California 90245             |
>                  |           (310) 615-0117 ext. 12                |
>       ==============================================================
>      |         Temp Phone at Kaiser Permanente: 626/564-7609        |
>      |Temp Fax at Kaiser Permanente: 626/564-7564-call before faxing|
>       ==============================================================
>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator: david@midrange.com
>+---
> 
--
| Internet: david@midrange.com
| WWW:      http://www.midrange.com/david
|
| ... A man can move mountains, a world can be turned,
| and the greatest of distances easily spanned,
| When the strength that's invested in making a fist
| is transformed into shaking a hand.
|
|                       - DMRoth
|
| Fight Spam! Join CAUCE! == http://www.cauce.org/

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---