Re: ODBC Security

[John Earl <johnearl@xxxxxxxxxxx>]

Gary,

The most effective way to prevent ODBC access to AS/400 data is to write or buy
Exit Programs that monitor your network interfaces.  By setting Exit Points at
the network entrance to your system, you can block and/or regulate ODBC, File
Transfer (including FTP) and Remote Command request that are sent it's way.  The
IBM manual "Client Access/400 for DOS and OS/2 Technical Reference V3R1" 
explains
how to write exit programs, or you take a look at our offering at
www.400security.com .

jte




Gary Munroe wrote:

> We are just in the process of setting up ODBC to our AS/400 (v3r2) and
> looking at security.  Specifically, how we could set it up so that people
> that currently have a signon to the AS/400 could be prevented from connecting
> via ODBC.  Any additional information on ODBC security (other than standard
> AS/400 file security) would be helpful too.
>
> Thanks.
>
>  __________________________________________________________________
> | Gary Munroe                                                      |
> |------------------------------------------------------------------|
> | I.T.S., AS/400 Services        Work: gmunroe@flemingc.on.ca      |
> | Sir Sandford Fleming College   Home: izzi@calweb.com             |
> | (705) 749-5523 x1409            Web: http://www.calweb.com/~izzi |
> |__________________________________________________________________|
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl   johnearl@toolnet.com

PowerTech Toolworks  206-575-0711
PowerLock Network Security www.toolnet.com
The 400 School   www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---