RE: How to secure my webserver ... ?

You're right.  You either run them or not.  To secure them, exit points are
needed.  Those are never very fun to write.  I do have a set of tools for
FTP, but haven't gotten around yet to seeing if they work of other TCPIP
protocols (which Im guessing they may.)

My advice would be to put the AS/400 behind some type of firewall or router
between the IntERnet and your AS/400 where you can control TCPIP port
requests easier.  Then, your AS/400 will be on your IntRAnet, where you
don't need to restrict ports.

Brad


> -----Original Message-----
> From: Philipp Rusch [mailto:Philipp.Rusch@rusch-edv.de]
> Sent: Monday, March 13, 2000 7:40 AM
> To: MIDRANGE-L@midrange.com
> Subject: How to secure my webserver ... ?
> 
> 
> Once again ...
> (Sorry with that german header, I was in a hurry)
>  
>  Hello all,
>  we are running a model 170 as a webserver and want to protect
>  unauthorised access to several TCPIP ports on one of the LAN
>  interfaces. I could not find a way to close a port for public access
>  like I can in other OS. All I found was to define specific user
>  access to ports on all interfaces globally.
>  Am I missing something here ?
>  Second, I dont need all those netbios demons starting, when I do
>  STRTCP, how do I get rid of these ?
>  
>  TIA,  Philipp Rusch
>  
>   -----------------------------------------------------------------
>  | EDV Beratung Rusch          EDP Consulting Rusch                |
>  | Philipp Rusch               Mailto: Philipp.Rusch@rusch-edv.de  |
>  | Am Errlich 9                WWW   : http://www.rusch-edv.de/    |
>  | D-61191 Rosbach,                                                |
>  | Germany                                                         |
>  | Phone: (+49) 6003 3972      Mobile : (+49) 172 89 86 230        |
>  | Fax  : (+49) 6003 3795                                          |
>  |                                                                 |
>   -----------------------------------------------------------------
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---