RE: query on ip configuration

KSI,

What you're describing strikes me as very appropriate, providing that
they are executing the telnet/ftp commands from their iSeries session.

If you find that your users can suddenly access the internet from their
PC's when they have a connection to the iSeries, then your server is
functioning as a gateway.  Check the IPDTGFWD (IP Datagram Forwarding)
parameter on your TCP attributes.  If it is *YES, change it to *NO.  Use
the CHGTCPA (Change TCP Attributes) command.  The default for this
parameter is *NO.

Regards,
Andy Nolen-Parkhouse

> admin@midrange.com] On Behalf Of KSI
> Subject: query on ip configuration
>
> Hi All,
>
> I'm facing a typical situation.  I have a iseries server with a single
> ethernet card, configured for 3 network addresses.  one internal & two
> extenal ip's( all with seperate route, subnet mask).  The surprising
> thing is the user who's configured to the local network (does not have
> any access to the external ip's) connects to the iseries server.
> And....from here he can do a telnet/ftp to any server that is attached
> to the external network(internet).  Can anyone comment how is it
> possible for the local user connected to the iseries to gets access to
> the internet??
>
> How to restrict the local user from accessing the external network
> (internet) when connected to the iseries having a external ip
> configured??
>
> TIA..