Re: query on ip configuration

[Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>]

Sounds like you have 3 routers on your physical network (at least).
Each of those has one of the address you named for next hop on the route.
Once a route is defined, all things being equal, someone can get to
wherever that goes (the subnet on the other side of the router)

This could be done with filtering in each router, but this seems ugly.  You
can stop all traffic from a certain subnet, or selected addresses (or
rnages) from a subnet.

I hope there's a better way.

I think there's some kind of port restriction on the 400, but I don't think
it helps this. But take a look, it's one of the options on GO CFGTCP.

HTH

Vern

At 04:15 AM 11/19/02 -0800, you wrote:
> --
> [ Picked text/plain from multipart/alternative ]
>
> Hi All,
>
> I'm facing a typical situation.  I have a iseries server with a single
> ethernet card, configured for 3 network addresses.  one internal & two
> extenal ip's( all with seperate route, subnet mask).  The surprising thing
> is the user who's configured to the local network (does not have any
> access to the external ip's) connects to the iseries server. And....from
> here he can do a telnet/ftp to any server that is attached to the external
> network(internet).  Can anyone comment how is it possible for the local
> user connected to the iseries to gets access to the internet??
>
> How to restrict the local user from accessing the external network
> (internet) when connected to the iseries having a external ip configured??
>
> TIA.