Re: FTP commands over a VPN to an AS/400 - (spelling corrections)

Mark,

That would be great if you could send me a text file of an example exit
program.  If you could send an example exit program that limits what FTP
commands are used by the client, that would be great.  Send it to
frank.kany@burr-reid.org

Thanks,

Frank

----- Original Message -----
From: "Mark A. Manske" <mmanske@minter-weisman.com>
To: <midrange-l@midrange.com>
Sent: Thursday, May 23, 2002 10:45 AM
Subject: RE: FTP commands over a VPN to an AS/400 - (spelling corrections)


> I would also write your own ftp validation program, and use the wrkreginf
> command to
> add it to the system exit points.
> We do that here and you can get VERY specific on what a user can do via
FTP,
> some people can only send me a file, not even do a dir or ls.
>
> If you do not want to go that route, there are some nice packages out
there
> that will help you lock down all the "unique" ways you can get into an
> AS/400
> other than green-screen.
>
> If you would like a code example let me know, I could send you a text file
> off-line as an attachment.
>
> HTH
> Mark
>
>
> -----Original Message-----
> From: midrange-l-admin@midrange.com
> [mailto:midrange-l-admin@midrange.com]On Behalf Of Charlie Browne
> Sent: Thursday, May 23, 2002 9:34 AM
> To: 'midrange-l@midrange.com'
> Subject: RE: FTP commands over a VPN to an AS/400 - (spelling
> corrections)
>
>
> This message is in MIME format. Since your mail reader does not understand
> this format, some or all of this message may not be legible.
> --
> [ Picked text/plain from multipart/alternative ]
> You can give them a USRPRF that has limited authority. Normal AS400 object
> level security is in effect when you FTP.
>
> Charlie Browne
> Creative Software Services
> Cedar Rapids IA
>
>
>
> -----Original Message-----
> From: Frank W. Kany IV [mailto:frank.kany@burr-reid.org]
> Sent: Wednesday, May 22, 2002 7:33 AM
> To: midrange-l@midrange.com
> Subject: FTP commands over a VPN to an AS/400 - (spelling corrections)
>
>
> This is a multi-part message in MIME format.
> --
> [ Picked text/plain from multipart/alternative ]
> A client of ours insists on encrypting a file and sending it via FTP
instead
> of emailing it.  We have never let a customer FTP into our AS/400 before.
>
> For test purposes, I played around with running FTP commands from my home
> via a VPN to the AS/400 at work to test out how our client would get into
> our system.  I was surprised to find out that when I added or deleted a
file
> from the system, there was no record or log of my activities when I was
> signed on via FTP.
>
> Our company has to setup the VPN software on the client's PC to enable
them
> to FTP to our AS/400.
>
> Is there a way to keep track or log any kind of FTP commands or anything
> done to the system while a customer is signed on via FTP?  Or, is there a
> way to limit what a user can do while signed on via FTP?
>
> TIA,
>
> Frank
> --
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>