Re: Okay to change QAUTOVRT to zero?

from Al Macintyre

You might want to visit the IBM security advisor & see what information is 
given there relative to your auditors suggestions.  It is nice to see that 
someone is having security audits.

http://www.as400.ibm.com/tstudio/secure1/index_av.htm

Do you ever need to have IBM, or other hardware tech support people, or 
outside programmers at consultancies, dial into your AS/400 from their 
facilities to do any work on your system such as trouble shooting when an end 
user calls for help?

Might this dial in occur without MIS being tole that you need to adjust 
QAUTOVRT so they can get in OK?  Current practice here is to have all outside 
lines varied off until needed, then when we are told that so & so needs in 
AND FOR WHAT PURPOSE, then we vary on the software needed for that particular 
business partner.  I habitually deny connection to people who say they need 
into our system but do not volunteer for what reason.  This sometimes delays 
service calls by end users for several days, but I cannot tell the difference 
between a hacker & a legitimate caller when they volunteer no information 
about what is going on.

Alister William Macintyre 
Computer Data Janitor etc. of BPCS 405 CD Rel-02 on 400 model 170 OS4 V4R3 
(forerunner to IBM e-Server i-Series 400)  @ http://www.cen-elec.com Central 
Industries of Indiana--->Quality manufacturer of wire harnesses and 
electrical sub-assemblies

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---