Re: FTP security question...

Hi Roger

My take on SNDNETF and SAVRST -

With SNDNETF, so far as I know, you have to use WRKNETF or RCVNETF to install the transferred files. I've only used WRKNETF, as I don't do much automated transfers. I've never looked into maybe a program that picks up sent files on the fly.

I've used SAVRST - there are versions for IFS, libraries, and objects, I believe. We don't use that here, for some reason I've not explored. With those commands, the restore is part of the process. I really like what it can do.

Regards
Vern

On 4/11/2024 7:35 AM, Robert Rogerson wrote:

Thanks to everyone. I'll research both the SNDNETF and SAVRST and see
which is easier. Thanks for all the info.

Rob

On Thu, Apr 11, 2024 at 7:49 AM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

"On the same box" lpars can imply some additional security. There is a way
to communicate between lpars "over the backplane". I used to use this but
it complicated H/A switches and didn't bring enough to the table to carry
on. I'm sure others will argue as that is the nature today. But even if
there is a network cable involved both lpars are usually on the same
subnet, and that subnet is usually restricted to just stuff in the same
immediate vicinity (normally only within the machine room). Thus a sniffer
getting that data is minimal. However many are using H/A processes which
may now have the other lpar being in a remote city for a time period. Now
that data is going out into the wild and back.

Just by using IBM i supplied tools like STRCMNTRC I can easily hack
passwords on non ssl connections. I documented how and shared that with
the department. The boss (who lurks on this list) was not too happy. But,
by golly, we are working on converting non-ssl telnet to ssl telnet because
of it.

I had another comment about ftp but it's probably better for me that I
don't share that.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.