Re: trading partner security

<from orig msg>400 has decent ftp exit control.

Problem is not concern for iSeries.
Problem is our firewall tech not wanting to open ranges of owned addresses.
jim
----- Original Message ----- 
From: "Gary Monnier" <gary.monnier@xxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Wednesday, February 18, 2004 12:13 PM
Subject: RE: trading partner security


> Jim,
>
> Have you thought about using exit point technology to allay the firewall
> tech's fears?
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jim Franz
> Sent: Wednesday, February 18, 2004 9:01 AM
> To: Midrange Systems Technical Discussion
> Subject: Re: trading partner security
>
>
> > Could you put the file on an intermediary system...say a Windows 2003
> > server or a linux server...something like that?
>
> i'm not worried about the iSeries (and would be more worried
> about a Win server). It's the firewall tech who doesn't want to
> open the range of addresses thru the firewall.
> He can map inbound ftp directly to the iSeries internal ip.
> We are secure there. We already process both put and get ftp's
> with zero problems (until the net tech on other end does something
> silly like changes their ip address).
> And this data does not belong on a public outside the firewall server.
> jim
>
> ----- Original Message ----- 
> From: "Shannon ODonnell" <sodonnell@xxxxxxxxxxxxxxxxx>
> To: "'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
> Sent: Wednesday, February 18, 2004 11:34 AM
> Subject: RE: trading partner security
>
>
> > Could you put the file on an intermediary system...say a Windows 2003
> > server or a linux server...something like that?  Then you don't have
> to
> > worry as much about them getting onto your iSeries.
> >
> > Shannon O'Donnell
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx
> > [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jim Franz
> > Sent: Wednesday, February 18, 2004 10:20 AM
> > To: MIDRANGE-L@xxxxxxxxxxxx
> > Subject: trading partner security
> >
> >
> > A trading partner wants to use ftp to get a daily file off our ifs,
> but
> > is adamently refusing to specify a single ip they are coming from,
> > saying that is a security risk to them, and has given us 3
> > ranges totalling over 700 addresses. I don't have a problem
> > but our firewall person is freaked and refuses. I assume they
> > have a herd of routers and servers in their farm.
> > note: partner is defense related. 400 has decent ftp exit control.
> > should i worry? jim _______________________________________________
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> > list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
> > unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> >
> >
> >
> >
> > _______________________________________________
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> >
> >
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>