× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Yes, I believe that means no one is currently connected to that share.

It does not mean that no one has it mapped in Window and may attempt to
connect at some point.

I would remove them yes.

--
Jim Oberholtzer
Agile Technology Architects

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
Berendt
Sent: Thursday, February 27, 2020 7:17 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: IFS share /QIBM and /QIBM/ProdData/OS400/DirSrv

My newest LPAR has only two shares one of them is user based. The other is
/QIBM/ProdData/OS400/DirSrv Perhaps older versions of IBM i had more
defaults. This one probably started out at 7.3 and is now 7.4.

An lpar that started out in the dark ages does have QIBM, etc. I will
review. Tell your friends family his death was not in vain, others will
learn by his example.

The big question is this: If I use IBM Navigator for i (the 2001 port
thing) to look at file shares, Properties, Sessions and I see an image like
https://imgur.com/11eCpBL Does that mean that the share is not in use at
this time? I may get aggressive on these IBM ones and shut them down.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Roberto De Pedrini
Sent: Thursday, February 27, 2020 5:33 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: IFS share /QIBM and /QIBM/ProdData/OS400/DirSrv

CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know the
content is safe.


I just got off the phone with a friend of mine: he has come under attack by
a ransomware virus who encrypted a lot of files all across the company ...
and in some IFS shares too ... like /QIBM/ProdData and different
subdirectories.

A lot of problems, Java doesn't start, HTTPGETCLOB functions stop working
and other nice things ... 2 days of hell for IT department.

Checking on the IBM i we found some default directories share, like /QIBM,
/QIBM/ProdData/OS400/DirSrv

I look at my other IBM i systems and everyone has the same default shared
directories ...

1) Why this default?
2) Can I stop these shares?
3) There's some kind on antivirus solution for IBM i?

Thanks




--
--
Roberto De Pedrini - Faq400 Srl
http://blog.faq400.com/en *A new IBM i Blog from IBM i Italian Community
Faq400*
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com

As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow-Ups:
Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.