Me too, but I cound an article that says they were introduced at V4R3.
http://www.ibmsystemsmag.com/i5/november03/internet/8470p1.aspx
Here's a rule I used to block a specific address, 192.168.2.12, but I
know it was >V4R5 so I don't know if the syntax will be accurate. The
following is three lines of packet rules:
FILTER SET x ACTION = DENY DIRECTION = INBOUND SRCADDR =
192.168.2.12 DSTADDR = * PROTOCOL = * DSTPORT = * SRCPORT = *
JRN = OFF
FILTER SET ALL ACTION = PERMIT DIRECTION = * SRCADDR = * DSTADDR
= * PROTOCOL = * DSTPORT = * SRCPORT = * JRN = OFF
FILTER_INTERFACE LINE = ETHLIN SET = x, ALL
The second line is key because the default is to deny everything, IIRC,
therefore if you don't include line 2, you ain't talking no more. In
that case, use the life-saver command Larry posted.
-Marty
------------------------------
date: Thu, 08 Nov 2007 15:51:21 -0500
from: Larry Bolhuis <lbolhuis@xxxxxxxxxx>
subject:
My mind is getting a tad rusty on V4R5 but I think filters were
available then. It's in iNav, Network, then IP Policies, then Packet
Rules. Run the wizard and tell it the offending IP to block. Then apply
it to your Ethernet line. Remember that if you FUBAR the whole thing you
can 'Undo' at the console with RMVTCPTBL *ALL :-)
- Larry
Albert York wrote:
Is there a way to block a specific address from accessing the AS/400?
I am on V4R5.
Thanks,
Albert
midrange.com
