RE: Ports to block to limit the use of Client access Data transferFacility

There isn't just a port for Client Access "data transfer".

The data transfer uses the regular remote database access ports.

Unless you don't intend to offer any kind of data access, ie. ODBC, OLEDB, JDCD, DRDA...then you need to look elsewhere.

Exit point program may be of some use, but the fact of the matter is you need working object level security to secure the iSeries.


Charles Wilt
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121
 

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of John Candidi
> Sent: Monday, May 23, 2005 2:19 PM
> To: midrange-l@xxxxxxxxxxxx
> Subject: Ports to block to limit the use of Client access Data
> transferFacility 
> 
> 
> 
> 
> Does anyone know which port on this list: (you'l have to 
> paste the 2nd line to the end of the address on the first 
> line to get the correct site)
> 
> http://www-912.ibm.com/s_dir/slkbase.nsf/1ac66549a214021886256
> 80b0002037e/ac
> c12fda96496e4b8625668f007ab75f?OpenDocument&Highlight=0,firewall
> 
> Needs to be blocked to limit the use of data transfer 
> functionality or even
> how to limit by user profile on the iSeries.
> 
> -- 
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
>