RE: RE: RE: Accessing AS400 Through Port Redirection

Somebody correct me if I'm wrong <ducking> but I think this goes back to a
comment that I made about using port 23.  Technically it's possible
although for security and other reasons you may not want to do so.
Actually, if I remember correctly I was just trying to infer that Client
Access wasn't a telnet client.


Dave Parnin
Nishikawa Standard Company
Topeka, IN  46571
daparnin@xxxxxxxxxxxxxxxxxx




                                                                                
                                 
                      "Wilt, Charles"                                           
                                 
                      <CWilt@xxxxxxxxxxxx>        To:       Midrange Systems 
Technical Discussion                
                      Sent by:                     
<midrange-l@xxxxxxxxxxxx>@SMTP@CTB                            
                      midrange-l-bounces@m        cc:       (bcc: David A 
Parnin/Topeka/NISCO/SPCO)              
                      idrange.com                 Subject:  RE: RE: RE: 
Accessing AS400 Through Port Redirection 
                                                                                
                                 
                                                                                
                                 
                      01/19/2005 01:03 PM                                       
                                 
                      Please respond to                                         
                                 
                      Midrange Systems                                          
                                 
                      Technical Discussion                                      
                                 
                      <midrange-l@midrange                                      
                                 
                      .com>                                                     
                                 
                                                                                
                                 
                                                                                
                                 



"Wilt's reply....."???

Boy that brings back some memories.  You weren't by change in the military
were you Doug? <grin>

In any event, I wanted to add my .02 about the idea of not using port 23 on
the public side.  Given the extensive use of port scanners, I'm not sure it
really matters.  Certainly it doesn't hurt, but I wouldn't let it give you
a false sense of security.


HTH,

Charles Wilt
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121


> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Douglas Handy
> Sent: Wednesday, January 19, 2005 12:41 PM
> To: Midrange Systems Technical Discussion
> Subject: Re: RE: RE: Accessing AS400 Through Port Redirection
>
>
> Dave,
>
> > Telnet on 23 should be OK but Client Access and Mocha
> aren't really Telnet,
> > are they?
>
> Yes they are, but a 5250 flavor of telnet as opposed to VT100 or
> whatever.  Also note that CA needs additional ports, as linked in
> Wilt's reply.  Other clients such as Mocha or TN5250 et al will likely
> need only the single port.  If not using VPN, I'd recommend *not*
> using port 23 on the public side but some other port mapped to port 23
> directed to the 400.  Then be sure to use a telnet exit program to
> validate connections.  And IP filtering at the firewall to limit
> access to authorized sources.
>
> Doug

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.