Re: Connect via PC

[John Earl <johnearl@xxxxxxxxxxx>]

boothm@ibm.net wrote:

> I ask this because I am curious.
>
> If someone does reach an AS/400 sign-in screen, can they get in if the
> instructions from IBM have been followed about service passwords, etc.?

Depends.  If they're connected via TCP/IP, (and no password sniffing is 
assumed),
then I think not.  If they're connected via SNA using Client Access, Rumba,
Rally!, etc, then definetly yes.  A signon screen presented during an SNA
connection implies that the router is connected and active.  Many things can be
done to an AS/400 over an active SNA router (ODBC updates, file transfer, Remote
Command, etc.) without ever signing on to the 5250 green screen.

Everyone who has SNA PC connections active on their AS/400 should view them as
posing the same security risk as signed on  but anattended 5250 terminal.

jte


> My understanding of firewalls is that they are designed more to keep those
> inside, inside.
>
> So far as attacks from outside, do they happen successfully on any but the
> most casual of installations?   One always fears that a great gaping
> security hole will be discovered, but that doesn't seem to happen any more
> often than a company has its phone system attacked, or fraudulent bills
> sent in for Accounts Payable payment.
>
> In the end I wonder if much of our worry about internet security will calm
> down once we get a bit more used to it.  Recently someone was telling
> about the security he'd placed on his web site where he had his
> advertising.  I asked him if he was really worried about someone breaking
> in and stealing his promotions and advertisements.  He didn't see the
> point of my question to him.
>
> Please understand, I am not advocating here, nor suggesting.  I am trying
> to learn.
>
> In <005801bdb6a6$d45c7f60$65bc56d1@atlpc1>, on 07/23/98
>    at 10:00 PM, "Carl Galgano" <cgalgano@ediconsulting.com> said:
>
> >Booth:
> >I agree with the addition of an ISP between the remote PC and the
> >Internet, however, your config allows the AS400 to be accessed direclty
> >via the internet and that bothers me....
> >Carl Galgano
>
> --
> -----------------------------------------------------------
> boothm@ibm.net
> Booth Martin
> -----------------------------------------------------------
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl
PowerTech Toolworks
johne@toolnet.com
253-858-7388

Riley Nichole Earl, Born 7/6/98 - 8lb 11oz.  Already an AS/400 fan!
--




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---