Re: Blocking an IP address

Me too, but I cound an article that says they were introduced at V4R3.
http://www.ibmsystemsmag.com/i5/november03/internet/8470p1.aspx

Here's a rule I used to block a specific address, 192.168.2.12, but I
know it was >V4R5 so I don't know if the syntax will be accurate. The
following is three lines of packet rules:

FILTER SET x ACTION = DENY DIRECTION = INBOUND SRCADDR =
192.168.2.12 DSTADDR = * PROTOCOL = * DSTPORT = * SRCPORT = *
JRN = OFF

FILTER SET ALL ACTION = PERMIT DIRECTION = * SRCADDR = * DSTADDR
= * PROTOCOL = * DSTPORT = * SRCPORT = * JRN = OFF

FILTER_INTERFACE LINE = ETHLIN SET = x, ALL

The second line is key because the default is to deny everything, IIRC,
therefore if you don't include line 2, you ain't talking no more. In
that case, use the life-saver command Larry posted.

-Marty

------------------------------

date: Thu, 08 Nov 2007 15:51:21 -0500
from: Larry Bolhuis <lbolhuis@xxxxxxxxxx>
subject:

My mind is getting a tad rusty on V4R5 but I think filters were
available then. It's in iNav, Network, then IP Policies, then Packet
Rules. Run the wizard and tell it the offending IP to block. Then apply
it to your Ethernet line. Remember that if you FUBAR the whole thing you

can 'Undo' at the console with RMVTCPTBL *ALL :-)

- Larry

Albert York wrote:

Is there a way to block a specific address from accessing the AS/400?

I am on V4R5.

Thanks,

Albert