Re: query on telnet exit program

since any user with windoze/linux/whatever can telnet to other systems (your
other 400s)it is the server exit programs that can protect you, and would
need to be on all
3 as400s, unless your going to put firewalls up with the other 400s behind
them.
jim franz

----- Original Message -----
From: "Scott Klement" <klemscot@klements.com>
To: <midrange-l@midrange.com>
Sent: Monday, November 18, 2002 11:32 AM
Subject: Re: query on telnet exit program


>
> AFIAK, there are no exit programs in the telnet client, just in
> the server.
>
> Here are some ideas for alternatives:
>
>    1) If the users never need to telnet out from the iSeries in question,
>        you could just deny them access to the telnet commands using normal
>        security procedures.
>
>    2) If they are allowed to telnet out, just not to certain places,
>        you could set up a firewall that disallowed outgoing connections
>        to certain places.   This is the way most people allow/disallow
>        connections, since most telnet software (aside from the one in
>        OS/400) do not have exit programs.
>
>    3) If neither of the first two are options, you could simply do the
>        work in the telnet server that they are connecting to.   You said
>        you don't want the traffic, but really, there's not much traffic
>        involved, I doubt you'd ever notice it, even on a dial-up
>        connection.  Plus, once the users find out it doesn't work, they
>        won't try it anymore, which will eliminate the traffic completely.
>
> On Mon, 18 Nov 2002, KSI wrote:
> >
> > Hi All,
> >
> > I have a network with 3 iseries servers connnected.  The user can signon
> > to any one of the server's & do a telnet to connect to other server(s).
> > Say, user signs on to server A , does a telnet to Server B or Server C.
> > Can i implement telnet exit program in server A (i guess the general
> > practice is to implement on B or C), so that when the user does a telnet
> > to server B or C does not get connected.  I don't want to implement exit
> > programs on server B or C as i don't want the traffic from server A to B
> > or C happen.
> >
> > Please let me if i can implement the exit program on server A & any
> > document available on the web for this.
> >
> > TIA for you support.
> >
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>