RE: FTP question -- MIDRANGE-L

I, for one, do not believe so. After visiting the web site in your
signature, I think that this discussion thread may be more of a threat to
your company than to an AS/400 on the Internet.

I'm a bit unsure what you feel is so risky to be giving out. Any hacker on
the web with knowledge of the AS/400 knows that IBM ships the system with
the QSECOFR password set to "QSECOFR". Telling somebody how to debug his
exit point program is no greater risk, IMHO, than telling them the URL to
the manual with those same instructions.

David Boring
Systems Engineer - Advanced
EDS E.solutions consulting
Direct: (562) 809-5460
E-mail: david.boring@eds.com


-----Original Message-----
Date: Tue, 29 Feb 2000 14:18:30 -0800
From: "Richard J. Serrano" <rjs@pgsas400.com>
Subject: Re: FTP question

Whoa!

Doesn't this outline, step-by-step, how to "backdoor" an AS/400 from a PC?
Perhaps a bit more
discretion and security awareness should be exercised before posting
something like this?

JMHO

Regards,

Richard J. Serrano
Palace Guard Software
Within the U.S.   (800) 762-3696
Outside the U.S   (562) 435-3355
Fax                      (562) 435-0010
rjs@pgsas400.com
http://www.pgsas400.com

- ----- Original Message -----
From: Rob Berendt <rob@dekko.com>
To: <MIDRANGE-L@midrange.com>
Sent: Tuesday, February 29, 2000 7:40 AM
Subject: Re: FTP question


> As the other person asked, are you able to ftp manually?  I would test by
going to Start,
Programs, MS Dos command prompt and doing the following:
> ftp your400
> dir
> cd yourlib         if this is necessary then this might explain why
ftp://xxx.xx.xxx.xx/filetodownload doesn't work.
> dir
> get thefile
>
> If that fails write down the error you are getting.  You might have to
debug your exit point
program.  Simple enough using STRSRVJOB and stuff.
>
>
>
>
>
> Larryt222@aol.com on 02/28/2000 10:45:59 PM
> Please respond to MIDRANGE-L@midrange.com@Internet
> To: MIDRANGE-L@midrange.com@Internet
> cc:
> Fax to:
> Subject: FTP question
>
> I would like to allow my clients to download data from my AS/400 to their
PCs
> via the net.  I want to be able to point them to a particular file on the
IFS
> through their web browser.  (i.e. ftp://xxx.xx.xxx.xx/filetodownload)  My
400
> is online and I have written an FTP logon server program to allow
"Anonymous"
> ftp and that works through a regular FTP session.  When I point to my
browser
> to my system it shows me the subdirectory but I cannot initiate a
download.
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---