RE: data transfer protection from FTP

["Stone, Brad V (TC)" <bvstone@xxxxxxxxxxxxxx>]

Check out www.bvstools.com/ftptool.html for an AS/400 side FTP security
program.  I use it on our boxes and a few others that I work on.  Great
results.  It's an exit program(s) with setup by user down to the path level
for access to each FTP command.  It allows logging globally and at the user
level.  IT also allows you to run "triggers" when certain commands are run
for certain users.

Brad

> -----Original Message-----
> From: stewart@prok.com.au [mailto:stewart@prok.com.au]
> Sent: Wednesday, September 20, 2000 7:40 PM
> To: MIDRANGE-L@midrange.com
> Subject: Re: data transfer protection from FTP
> 
> 
> I was very reluctant to run the ftp server on the AS400 because 
> of security, and used to start and stop the server for each transfer. 
> David Stanfield of Focal Systems suggested a better option, which I
> have found very satisfactory.
> The AS400 can act as an FTP client, and you can send and 
> receive files to 
> an FTP server from a CL program.
> All you have to do is run an FTP server on a PC on your 
> network, and set it
> up to use a folder on a mapped network drive. Then you can 
> use CL scripts
> to tranfer files for users under program control, so it is 
> easy to manage 
> the security. 
> The most popular use by my users is to FTP spoolfiles for 
> import into to
> excel. 
> It is also possible to set up a folder structure in the network FTP
> folders, with additional network access restrictions, eg 
> separate folders
> for accounts,
> hr, engineering, sales etc.
> There are a number of FTP servers for Windows around. I use WarFTP
> (www.jgaa.com) on Win95, and have found it stable and unobtrusive.
> Alternatively you could run an FTP server on your network server.
> 
> 
> At 17:31 20/09/2000 -0400, you wrote:
> >We use a profile with
> >Initial program = *NONE
> >Initial menu = *SIGNOFF
> >Limit capabilites = *YES.
> >This lets the FTP run but prevents anyone from using this 
> profile get a
> >signon session.
> >
> >
> >> I have a similar concern, and if it's already been 
> discussed, let me
> >> apologize ... I'm interested in recommendations for 
> securing batch FTPs
> >> where it is not unusual to store IDs with non-expiring 
> passwords in a
> >> readable file ... suggestions, please.
> >>
> >> +---
> >> | This is the Midrange System Mailing List!
> >> | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> >> | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> >> | To unsubscribe from this list send email to
> >MIDRANGE-L-UNSUB@midrange.com.
> >> | Questions should be directed to the list owner/operator:
> >david@midrange.com
> >> +---
> >>
> >+---
> >| This is the Midrange System Mailing List!
> >| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> >| To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> >| To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> >| Questions should be directed to the list owner/operator: 
> david@midrange.com
> >+---
> >
> >
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---