Re: globally accessible telnet? -- MIDRANGE-L

re Telnet - when you say NAT-ed, I hope you mean that you have some proxy
server between the nasty web and your friendly 400s.  If you're connecting
your AS400 directly, STOP!!!  Use a proxy or firewally.  Most proxies are
set up to get from the inside out, but getting from the outside in must be
specifically configured.  You can tell the proxy 'port 23 traffic on
12.34.56.78 gets forwarded to 192.168.0.170'.  That example is
oversimplified, because this would be unencrypted traffic.  Doing encryption
would require one of several things - a VPN server, SSL on the AS400, or a
pair of matched proxy servers like Wingate that have proprietary encryption.
The third option applies of you are connecting two fixed sites that both
need a proxy server.

My company does internet connectivity consulting - we provide time sharing
services over the web to as/400's so we've been tinkering with this stuff
for some time.  Check out http://www.timeshare400.com for more details, or
email me privately and I'll give you a call.

Re the GIF - go ahead and borrow one from another site, or even borrow one
from IBM.  It's in their interest to have that logo splattered around as
much as possible.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Time share a current model AS/400 over the internet!
Individual developers, company development and testing, or full outsourcing.
Get access to RPG, Cobol, C, SQL, Java and more for a low monthly fee.
http://www.timeshare400.com
mailto:timeshare400@arctools.com
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
----- Original Message -----
From: "William A.(Tony) Corbett" <corbett@asresources.com>
To: <midrange-l@midrange.com>
Sent: Wednesday, May 17, 2000 6:36 PM
Subject: globally accessible telnet?


> I've got 5 publicly routable IP's set up on my 170 (V4R4), with 4 of
> them to host web sites and one for telnet into the 400 from outside.
> (actually, they're "NAT'd into my private network address scheme) I
> don't have the IP's set up on a DNS server right yet, still in test, but
> the 4 web sites are accessible from the outside using the IP address
> rather than a name.
>
> My question is:  How can I limit telnet access to only one of the 5 ip
> addresses?  As it stands now, all 5 are accessible via telnet.  This is
> 5 times more exposure than I want and I'd like to limit telnet to only
> the address(es) I want to leave open to telnet.  I haven't found any
> reference to tying the telnet server to a single IP.
>
> Also, anyone know where to get one of those cutesy "this site is running
> on an AS/400" gif files?  Aside from just "stealing" one, hopefully.
>
> Thanks
> --
> William A.(Tony) Corbett
> corbett@asresources.com
> http://www.asresources.com
> http://www.cbt400.com
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---