RE: Allowing SFTP in to your i.

We have had some of our financial customers take a two tiered approach.

To keep the actual file transfer off the i, they take the files in to an

Not my choice, but they cited compliance reasons for doing so. Works

Regards,
Richard Schoen
RJS Software Systems Inc.
Where Information Meets Innovation
Document Management, Workflow, Report Delivery, Forms and Business

Email: richard@xxxxxxxxxxxxxxx
Web Site: http://www.rjssoftware.com
Tel: (952) 736-5800
Fax: (952) 736-5801
Toll Free: (888) RJSSOFT
------------------------------

message: 4
date: Thu, 12 Apr 2012 15:28:54 -0400
from: rob@xxxxxxxxx
subject: Allowing SFTP in to your i.

We have a financial institution that wishes to initiate sftp with us. We
would be the server.

I read the wiki article at:
http://wiki.midrange.com/index.php/SSH

The bottom of that had some external references, some of which worked
(Attention YIPs: You may want to fix their reference to you!)

One item of extreme concern is:
Security implications of using SSH on iSeries
http://archive.midrange.com/security400/200609/msg00048.html

Apparently it totally ignores any existing ftp exit points you may have
written. This is a major shock to me. Then there are concerns about
ccsid translation and whatnot. Should I be concerned as I am? Or is this
FUD? The one reply to the email leads me to NOT believe it is FUD but a
rather valid concern.

Rob Berendt
--
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.