RE: Controlling ports used by DDM

[rob@xxxxxxxxx]

Thanks Ken,

I did the
WRKOBJLCK OBJ(ROB/AAAROB) OBJTYPE(*FILE)
checked the job and in the joblog I get:

Message ID . . . . . . :   CPI9162
Date sent  . . . . . . :   01/25/01      Time sent  . . . . . . :
14:08:27
Message . . . . :   Target job assigned to handle DDM connection started by
  source system over TCP/IP.
Cause . . . . . :   A distributed data management (DDM) connection has been
  started over TCP/IP by source system job 425921/ROB/VWS3477FC1 on source
  system GDIMAIL. See source job 425921/ROB/VWS3477FC1 for all additional
  messages regarding the DDM connection. DDM uses remote IP address
  10.10.1.141 and remote port 17238 for this TCP/IP connection.

NETSTAT *CNN
is showing the following:

Remote           Remote  Local
Address           Port    Port  Idle Time  State
10.10.1.141       17238    446  000:05:04  Established

So I opened up another ddm session from a different 400.

 Message ID . . . . . . :   CPI9162
 Date sent  . . . . . . :   01/25/01      Time sent  . . . . . . :
14:17:12
 Message . . . . :   Target job assigned to handle DDM connection started
by
   source system over TCP/IP.
 Cause . . . . . :   A distributed data management (DDM) connection has
been
   started over TCP/IP by source system job 680716/ROB/VWS318001 on source
   system GDISYS. See source job 680716/ROB/VWS318001 for all additional
   messages regarding the DDM connection. DDM uses remote IP address
   10.10.1.144 and remote port 52616 for this TCP/IP connection.


Remote           Remote  Local
Address           Port    Port  Idle Time  State
10.10.1.141       17238    446  000:10:02  Established
10.10.1.144       52616    446  000:01:19  Established


Do you think that 446 is the port to open up?


Rob Berendt

==================
Remember the Cole!


                                                                                
                                         
                    "Sims, Ken"                                                 
                                         
                    <KSIMS@SOUTHERNWINE        To:     MIDRANGE-L@midrange.com  
                                         
                    .com>                      cc:                              
                                         
                    Sent by:                   Subject:     RE: Controlling 
ports used by DDM                            
                    owner-midrange-l@mi                                         
                                         
                    drange.com                                                  
                                         
                                                                                
                                         
                                                                                
                                         
                    01/22/01 08:43 PM                                           
                                         
                    Please respond to                                           
                                         
                    MIDRANGE-L                                                  
                                         
                                                                                
                                         
                                                                                
                                         




Hi Rob -

>But the darn thing will vary!  10516, 10530, etc.  My
>thought is to only open up 10500 through 10599.  The
>Cisco kid can do this but he wondered if it also uses
>a different port to initialize the conversation.  I've
>heard of this happening for ftp or telnet, like use port
>xxx to start the comm then use port yyy for the actual
>work.  I am not sure that DDM uses any of these initiator
>ports.

There are two ports involved: the source port and the target port.  The
source port can vary, the target port should not.  Fortunately, the target
port is the one that needs to be open in the router.  According to the
service table on my AS/400, DDM without SSL is 447, DDM with SSL is 448.

Run your UPDDTA and run NETSTAT *CNN from another session.  In NETSTAT find
the session where the UPDDTA is running.  Use F14 to show ports by number
rather than name.  The local port should match the changing numbers that
you
are seeing in the joblog.  The remote port should stay the same each time
and will persumably be 447 or 448.

Have the Cisco kid open up just remote port(s) that you need.

Ken
Southern Wine and Spirits of Nevada, Inc.
Opinions expressed are my own and do not necessarily represent the views of
my employer or anyone in their right mind.

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---