Re: Grumble...

[Steve <steve@xxxxxxxxxx>]

In article <200103051248.AA13500572@plutabrothers.com>, Joe Pluta
<joepluta@plutabrothers.com> writes
>Well, that makes one of us.
>
>Have you tried to access outside of your subnet with the AS/400?  Not that it 
>matters - several people here have noted that their AS/400s with 10. addresses 
>work fine, and in addition have been helpful with suggestions about how to 
>further diagnose or alleviate the problem.  Unfortunately, nothing has worked. 
> 
>The fact remains that whenever I attempt to ping outside of my subnet, the 
>AS/400 refuses to send out any packets whatsoever.  This is either because:
>
>1. The AS/400 doesn't believe there is an outside network (which could 
>conceivably be a problem with my router - at some point it may not have 
>responded to a test packet of some kind, and the AS/400 has decided it's not 
>there).
>
>2. The AS/400 has some hardcoding that won't allow it to send packets outside 
>of 
>it's subnet, perhaps due to a bug in the private subnet logic.

3. Your routing is broken, and not allowing NAT back to your AS/400.
(Unlikely as your Windows PCs don't have the problem).

4. Your AS/400 security won't let the packets return (i.e. is blocking
them).

My AS/400s have 192.168.* addresses, and FTP data out to an external
machine daily. They have to log in to the firewall to do it, but so do
the windows and Unix boxes.

>
>The point is moot (I hope) for two reasons.  I've got a whole slew of PTFs 
>that 
>I plan on applying this week, and I also have a new machine due in on 
>Thursday.  
>If I get a chance to apply the PTFs, I'll certainly let the list know what the 
>results are.

I still think your 400 config is wrong, somewhere. I'm setting up a 400
to run all our 20+ websites, but it'll be in the DMZ.
-- 
Steve
  -----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCM/B$ d++(-) s+:+ a+ C++ UL++ L+ P+ W++ N+++ K w--- O V 
PS+++ PE- t+ 5++ X- R* tv+ b+++ DI++ G e h---- r+++ z++++
  ------END GEEK CODE BLOCK------
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---