Re: data transfer protection from FTP

[booth@xxxxxxxxxxxx]

huh?  Am I misunderstanding something here?  You are worried that the 
AS/400 FTP server is insecure so you are shutting it off and having anyone 
with a PC FTP Server able to FTP files to and from the AS/400 with no 
other security than what they choose to install on their PC?


_______________________
Booth Martin
Booth@MartinVT.com
http://www.MartinVT.com
_______________________




stewart@prok.com.au
Sent by: owner-midrange-l@midrange.com
09/20/2000 08:40 PM
Please respond to MIDRANGE-L

 
        To:     MIDRANGE-L@midrange.com
        cc: 
        Subject:        Re: data transfer protection from FTP

I was very reluctant to run the ftp server on the AS400 because 
of security, and used to start and stop the server for each transfer. 
David Stanfield of Focal Systems suggested a better option, which I
have found very satisfactory.
The AS400 can act as an FTP client, and you can send and receive files to 
an FTP server from a CL program.
All you have to do is run an FTP server on a PC on your network, and set 
it
up to use a folder on a mapped network drive. Then you can use CL scripts
to tranfer files for users under program control, so it is easy to manage 
the security. 
The most popular use by my users is to FTP spoolfiles for import into to
excel. 
It is also possible to set up a folder structure in the network FTP
folders, with additional network access restrictions, eg separate folders
for accounts,
hr, engineering, sales etc.
There are a number of FTP servers for Windows around. I use WarFTP
(www.jgaa.com) on Win95, and have found it stable and unobtrusive.
Alternatively you could run an FTP server on your network server.


At 17:31 20/09/2000 -0400, you wrote:
>We use a profile with
>Initial program = *NONE
>Initial menu = *SIGNOFF
>Limit capabilites = *YES.
>This lets the FTP run but prevents anyone from using this profile get a
>signon session.
>
>
>> I have a similar concern, and if it's already been discussed, let me
>> apologize ... I'm interested in recommendations for securing batch FTPs
>> where it is not unusual to store IDs with non-expiring passwords in a
>> readable file ... suggestions, please.
>>
>> +---
>> | This is the Midrange System Mailing List!
>> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>> | To unsubscribe from this list send email to
>MIDRANGE-L-UNSUB@midrange.com.
>> | Questions should be directed to the list owner/operator:
>david@midrange.com
>> +---
>>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>| To unsubscribe from this list send email to 
MIDRANGE-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator: 
david@midrange.com
>+---
>
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to 
MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: 
david@midrange.com
+---




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---