RE: Firewall in AS400

>From: Neil Palmer [mailto:neilp@dpslink.com]
>The theory is you run a firewall on same system in a Linux
>partition that has dedicated LAN ports (not shared through OS/400).

Yes, but even that is expensive.

1) You need a LPARable box (and a business partner to do the LPAR planning
which isn't free)
2) You need to load Linux into a partition
3) You should then have 3 partitions, 1 primary slim controller, 1 Linux and
1 OS/400
4) You should have 3 ethernet cards in the iSeries. 2 for firewall (1 in 1
out) and 1 for OS/400 and that assumes you don't want a DMZ on another
segment or you'll need 3 for Linux.

Now, you _could_ have 2 partitions, but when you bring down the OS/400
partition your firewall comes down too.

You _could_ use the internal virtual ethernet card from Linux to OS/400 (I
think, does Linux support that) but then OS/400 will have to act as a router
for all your Lan traffic. Talk about an expensive router.

IMHO the smart thing to do is just get a solid firewall appliance and be
done w/it. Heck, for small ships (150s, 170s, etc.) you could even use the
linksys box. <G>

-Walden


------------
Walden H Leverich III
President
Tech Software
(516) 627-3800 x11
(208) 692-3308 eFax
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)



-----Original Message-----
From: Neil Palmer [mailto:neilp@dpslink.com]
Sent: Thursday, April 11, 2002 12:07
To: midrange-l@midrange.com
Subject: Re: Firewall in AS400


The theory is you run a firewall on same system in a Linux partition that
has dedicated LAN ports (not shared through OS/400).  Not on a dedicated
400/iSeries box.

...Neil





Dr Syd Nicholson <sydnic@ccs400.com>
Sent by: midrange-l-admin@midrange.com
2002/04/11 12:40
Please respond to midrange-l


        To:     midrange-l@midrange.com
        cc:
        Subject:        Re: Firewall in AS400


Might be OK in a large shop, but small shops can't afford it. Besides who
would spend over $70,000 on an iSeries to run Linux when the exactly the
same benefit can be achieved with a PC costing less then $3,000. Its only a
firewall, doesn't need a vast amount of expensive hardware, just a fast
processor amd plenty of memory.

Syd Nicholson


Wills, Mike N. (TC) wrote:

>I should clarify, that is what I was told at a recent class on the WDT.
They
>suggested a linux firewall partition first, then your web server, then
>another linux firewall, then your database.

>
>
>How does one sell an Iseries , touted as being Internet and Intranet
>friendly without some type of Firewall software? Load Linux?
>Is it just me?
>

>
>
>Linux in an LPAR.
>
>
>Dear All,
>
>Does anyone know about Firewall Product in AS400 ?
>
>
>Sincerely,
>
>Fery Gideon
>AS400 Maniac's





_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.