RE: FTP question

Sure, if everyone has *ALLOBJ authority.  But that's a backdoor anyhow.  FTP
doesn't override object level security.

The anonymous exit program example given by ibm should limit the user to a
certain directory as well.

For even better FTP security, check out FTPTOOL at my web site.  It adds
another layer of security on top of object level.

Bradley V. Stone
e-RPG! - www.bvstools.com/erpg.html
BVS/Tools - www.bvstools.com
Netshare400 - www.netshare400.com



> -----Original Message-----
> From: Richard J. Serrano [mailto:rjs@pgsas400.com]
> Sent: Tuesday, February 29, 2000 4:19 PM
> To: MIDRANGE-L@midrange.com
> Subject: Re: FTP question
> 
> 
> Whoa!
> 
> Doesn't this outline, step-by-step, how to "backdoor" an 
> AS/400 from a PC? Perhaps a bit more
> discretion and security awareness should be exercised before 
> posting something like this?
> 
> JMHO
> 
> Regards,
> 
> Richard J. Serrano
> Palace Guard Software
> Within the U.S.   (800) 762-3696
> Outside the U.S   (562) 435-3355
> Fax                      (562) 435-0010
> rjs@pgsas400.com
> http://www.pgsas400.com
> 
> ----- Original Message -----
> From: Rob Berendt <rob@dekko.com>
> To: <MIDRANGE-L@midrange.com>
> Sent: Tuesday, February 29, 2000 7:40 AM
> Subject: Re: FTP question
> 
> 
> > As the other person asked, are you able to ftp manually?  I 
> would test by going to Start,
> Programs, MS Dos command prompt and doing the following:
> > ftp your400
> > dir
> > cd yourlib         if this is necessary then this might explain why
> ftp://xxx.xx.xxx.xx/filetodownload doesn't work.
> > dir
> > get thefile
> >
> > If that fails write down the error you are getting.  You 
> might have to debug your exit point
> program.  Simple enough using STRSRVJOB and stuff.
> >
> >
> >
> >
> >
> > Larryt222@aol.com on 02/28/2000 10:45:59 PM
> > Please respond to MIDRANGE-L@midrange.com@Internet
> > To: MIDRANGE-L@midrange.com@Internet
> > cc:
> > Fax to:
> > Subject: FTP question
> >
> > I would like to allow my clients to download data from my 
> AS/400 to their PCs
> > via the net.  I want to be able to point them to a 
> particular file on the IFS
> > through their web browser.  (i.e. 
> ftp://xxx.xx.xxx.xx/filetodownload)  My 400
> > is online and I 
> have written an FTP logon server program to allow "Anonymous"
> > ftp and that works through a regular FTP session.  When I 
> point to my browser
> > to my system it shows me the subdirectory but I cannot 
> initiate a download.
> >
> > Thanks
> > +---
> > | This is the Midrange System Mailing List!
> > | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> > | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> > | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator: 
> david@midrange.com
> > +---
> >
> >
> > +---
> > | This is the Midrange System Mailing List!
> > | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> > | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> > | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator: 
> david@midrange.com
> > +---
> >
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---