RE: Scanning the iSeries (IFS) for Viruses

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: rob@xxxxxxxxx
> 
> Technically that's true.  However 1)  A virus could be placed on a
directory that's not shared, via FTP, etc.

Yeah, that's true.  But then how would it infect another machine, except
again through FTP?  And if you're distributing stuff through your
network via FTP without scanning it, you've got bigger problems.

Also, allowing unfettered access to your IFS via FTP is asking for
trouble.  If it were me, I'd lock FTP down tight with an exit program.

Of course, I have a general issue with using the iSeries as an FTP file
repository.  It's about the LEAST cost-effective storage medium on the
planet, but if you're using it to back up those files, then you may have
a valid business reason.  At that point, I'd designate a specific folder
for FTP access and make sure it's mapped specifically for scanning
purposes.

If on the other hand you allow unregulated FTP access to your IFS and
you don't really know who is putting what where, then I'd agree you have
a security issue.  But it's a lot bigger than a virus.

Joe