RE: RE: RE: Accessing AS400 Through Port Redirection

"Wilt's reply....."???

Boy that brings back some memories.  You weren't by change in the military were 
you Doug? <grin>

In any event, I wanted to add my .02 about the idea of not using port 23 on the 
public side.  Given the extensive use of port scanners, I'm not sure it really 
matters.  Certainly it doesn't hurt, but I wouldn't let it give you a false 
sense of security.


HTH,

Charles Wilt
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121
 

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Douglas Handy
> Sent: Wednesday, January 19, 2005 12:41 PM
> To: Midrange Systems Technical Discussion
> Subject: Re: RE: RE: Accessing AS400 Through Port Redirection
> 
> 
> Dave,
> 
> > Telnet on 23 should be OK but Client Access and Mocha 
> aren't really Telnet,
> > are they?
> 
> Yes they are, but a 5250 flavor of telnet as opposed to VT100 or
> whatever.  Also note that CA needs additional ports, as linked in
> Wilt's reply.  Other clients such as Mocha or TN5250 et al will likely
> need only the single port.  If not using VPN, I'd recommend *not*
> using port 23 on the public side but some other port mapped to port 23
> directed to the 400.  Then be sure to use a telnet exit program to
> validate connections.  And IP filtering at the firewall to limit
> access to authorized sources.
> 
> Doug