RE: Remote Access (Again)

["Booth Martin" <Booth@xxxxxxxxxxxx>]

 I will not argue any of these comments.  It isn't worth it.  I would say
this:  using this same logic in the non-internet world would result in
companies passing policies disallowing their vehicles to use secondary roads
 requiring employees to wear both belt and suspenders, and disallowing
buttons (zippers would be required).  At home, you'd put steel over your
screen doors and bars on your windows.

Of course there are risks, life has risks.  We learn to use balance and
moderation.  The real risk in the AS/400 security world isn't terrorists
from the mideast, its disguntled employees in Accounting with Client Access
and Excel.


---------------------------------------------------------
Booth Martin   http://www.MartinVT.com
Booth@MartinVT.com
---------------------------------------------------------

-------Original Message-------

From: midrange-l@midrange.com
Date: Wednesday, December 04, 2002 10:04:02 AM
To: 'midrange-l@midrange.com'
Subject: RE: Remote Access (Again)

Thank you. Well put.

jch

-----Original Message-----
From: Adam Lang [mailto:aalang@rutgersinsurance.com]
Sent: Wednesday, December 04, 2002 8:57 AM
To: midrange-l@midrange.com
Subject: Re: Remote Access (Again)


To sum up everything Scott said:

The problem with Telneting across the internet is that login information is
clear text.

So, anyone sniffing packets can grab your as/400 username and password, as
well as other info going across.

Also, they will know the destination port and ip address.

Which means they can now connect to your as/400 with a valid account.

Think o...