RE: Firewall and SSL blues

["Sean Porterfield" <sporter@xxxxxxxxxxxx>]

> From: Pete Helgren

> I can use TN5250 with SSL internally, but I can't seem to connect outside
> the firewall.  I opened port 992 TCP inbound, and 992 UDP send receive.  I
> have to "Publish" the internal address with an inbound connection from the
> external address to the internal address on 992 TCP as well.

You shouldn't need UDP, just TCP.  I know this has been covered many times,
but I don't know the magic search term to find it in the archives...

http://www-912.ibm.com/n_dir/nas4apar.NSF/c79815e083182fec862564c00079d117/f
cc664db54c4c549862568720047b5fd?OpenDocument&Highlight=2,ii12227

APAR II12227

The following is a list of iSeries Access for Windows functions
and which servers are used by those functions:
--------------------------------------------------------------
FUNCTION:  PC5250 display and printer emulation
SERVERS USED:  Sign-on, Central, Telnet
------------------------------------------

SERVER:  Sign-on
DEFAULT PORT:  8476 (9476)
SERVER:  Central
DEFAULT PORT:  8470 (9470)
SERVER:  Telnet
DEFAULT PORT:  23 (992)

The ports in parentheses are the SSL ports.  Also you should know that
iSeries Access will try to use portmapper on 449 unless you configure the
connection properties to use "Standard" under "Where to lookup remote port"