Re: Firewall to protect AS400

[boothm@xxxxxxxxxxxxxxxxx]

I'd guess that FTP and e-mail are outside the scope of the immediate 
project?  Customer access to AS/400 data wouldn't need e-mail or FTP would 
it?  The reason I ask is because I wonder what exposure you face if you 
put the AS/400 on the net, no firewall, and allow order inquiry  against 
AS/400 data, and no write authority.  I'd think that inquiry-only should 
be safe enough.  Then for order entry use a web-based application 
entirely.  As we get more and more people on the internet our exposures go 
down and down.  No one has a firewall on their telephone system.  I 
understand these two issues aren't the same, but the opprtunities for 
havoc exist on a telephone sysytem too, but we have decided the benefits 
far outweigh the risks.




Please respond to MIDRANGE-L@midrange.com
Sent by:        owner-midrange-l@midrange.com
To:     MIDRANGE-L@midrange.com
cc: 

Subject:        Firewall to protect AS400

We need to support telnet(perhap IBMs
Host On Demand), printing(lpr/lpd), ftp serving, and e-mail. 
Jim Franz
Systematic Control, Inc                          jfranz@sysctl.com



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---