RE: Turn off PING server on AS/400 -- MIDRANGE-L

Or use Ops Navigator (iSeries Navigator, whatever...) to setup Packet
rules....  I think you would want to set a filter on ICMP service....

Eric DeLong
Sally Beauty Company
MIS-Project Manager (BSG)
940-898-7863 or ext. 1863



-----Original Message-----
From: rob@xxxxxxxxx [mailto:rob@xxxxxxxxx]
Sent: Wednesday, May 12, 2004 4:45 PM
To: Midrange Systems Technical Discussion
Subject: RE: Turn off PING server on AS/400


There used to be an IBM firewall product for the iseries.  Dropped a few 
releases back.
Current strategy is:
1-External appliance (such as a cisco firewall)
2-Linux partition
3-Integrated xseries server

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"York, Albert" <albert.york@xxxxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
05/12/2004 04:34 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
cc

Subject
RE: Turn off PING server on AS/400






Thanks Scott.

I have an AS/400 that I want to put on the Internet for a specific 
purpose.
I only want to have one port open, which I will handle with a socket 
server
program. I will turn all other TCP/IP servers off, including telnet.

Are you taking about an  external firewall, such as router? I wasn't
planning on using a router but I could if I have to.

Or is there a firewall on the AS/400 I can use?

Albert York 

                 -----Original Message-----
                 From:           midrange-l-bounces@xxxxxxxxxxxx
[SMTP:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
                 Sent:           Wednesday, May 12, 2004 2:19 PM
                 To:             Midrange Systems Technical Discussion
                 Subject:                Re: Turn off PING server on 
AS/400


                 Hi Albert,

                 > I need to be able to have the AS/400 not respond to 
PINGs without
shutting
                 > down TCP/IP.
                 >
                 > I looked in the archives but I can't see anything about 
it.
                 > Is there a simple way to do this?

                 Ping is a little bit different from other TCP/IP 
applications, in
that
                 there's no "ping server."  Ping is implemented at a 
lower-level,
it's part
                 of the TCP/IP stack itself.

                 The best way to disable it is by blocking ICMP echo 
packets with a
                 firewall.

                 Can I ask why you want to disable it?
                 _______________________________________________
                 This is the Midrange Systems Technical Discussion 
(MIDRANGE-L)
mailing list
                 To post a message email: MIDRANGE-L@xxxxxxxxxxxx
                 To subscribe, unsubscribe, or change list options,
                 visit: 
http://lists.midrange.com/mailman/listinfo/midrange-l
                 or email: MIDRANGE-L-request@xxxxxxxxxxxx
                 Before posting, please take a moment to review the 
archives
                 at http://archive.midrange.com/midrange-l.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.