Re: FTP - Security & audit

[Carel Teijgeler <teygeler@xxxxxxx>]

Ben Akiba wrote:

> OK, security gurus, here is a situation:
>
> FTP client on PC, FTP server AS/400, boxes A and B, V4R5. Put a file
> from PC to A, put a file from PC to B. Files overwritten.
>
> QAUDJRN on A contains entry type SK (Secure Sockets connection) with PC
> internet address and AS internet address, then SP (Swap profile) showing
> swap between MyUserId and QTCP, and finally 4 entries showing that file
> was cleared and written into (file is under OBJAUD *CHANGE).
>
> QAUDJRN on B contains everything except first entry (SK with address of
> client requesting transfer).
>
> Client and servers are on the same (fairly complex) network, and routes
> are not necessarily the same (actually boxes A and B don't "see" each
> other). No exit programs so far, but working on it.
>
> Question: what is different in set up, so auditing of Box B doesn't
> reveal requester's address. I guess, it might have something to do with
> SSL, but I didn't notice ports (443?), other that "FTP - well known" on
> box A. Any ideas? Solutions?
>
> Bonus question:
> Completely unrelated, what would be a typical server command for the FTP
> SERVER running on the PC, so that I can run command on PC from FTP
> client on AS? (Once again, don't confuse this problem with previous one,
> this is totally opposite situation)
>
> Thks.
>
> Vanja Jovic,
> Canada

Ben/Vanja,

To the first problem: did you ended the connection to   a and opened a 
connection
to B?
Second question: I think QUOTE RCMD will do.

Regards,

Carel Teijgeler.

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---