RE: trading partner security

Did you ask the partner why the security of its system is more important
than the security of yours?  After all, you have no guarantee the partner
owns all the addresses and will always own them.  You also have no guarantee
the partner will remember to notify you if some of those addresses are no
longer good.  

I don't suppose the partner is willing to let you execute a "put" to their
system.  It would make more sense since your system is actually generating
the file and knows when it's ready.  

Donald R. Fisher, III
Project Manager
Roomstore Furniture Company
(804) 784-7600 extension 2124
DFisher@xxxxxxxxxxxxx


<clip> 
> A trading partner wants to use ftp to get a daily file off our ifs, but
> is adamently refusing to specify a single ip they are coming from,
> saying that is a security risk to them, and has given us 3
> ranges totalling over 700 addresses. I don't have a problem
> but our firewall person is freaked and refuses. I assume they
> have a herd of routers and servers in their farm.
> note: partner is defense related. 400 has decent ftp exit control.
> should i worry? jim 
<clip>