RE:

Agreed.  Your choices for firewalls are endless these days, from dedicated
units to linux boxes.  

Brad

> -----Original Message-----
> From: Christopher A. Libby [mailto:clibby@mainepublicservice.com]
> Sent: Tuesday, July 17, 2001 6:47 AM
> To: WEB400@midrange.com
> Subject: RE:
> 
> 
> I would strongly recommend getting a firewall device and 
> placing all these
> machines in the DMZ.  Otherwise, there is the potential to 
> choke your AS/400
> if one of these other servers has a lot of traffic.
> 
> -Chris
> 
> ---------------------------------------------------------
> Christopher A. Libby, Programmer/Analyst
> Maine Public Service Company (www.mainepublicservice.com)
> clibby@mainepublicservice.com (207) 768-5811 ext. 2210
> 
> 
> > -----Original Message-----
> > From: owner-web400@midrange.com [mailto:owner-web400@midrange.com]On
> > Behalf Of Evan Harris
> > Sent: Tuesday, July 17, 2001 5:50 AM
> > To: web400@midrange.com
> > Subject:
> >
> >
> > Hi guys
> >
> > we have a customer that wants to provide access to some 
> boxes behind the
> > AS/400 directly, but still maintain security. A suggestion that
> > has come up
> > is to set IP forwarding on on the AS/400 and use IP 
> filtering to control
> > the traffic that gets past the AS/400 (apologies if I haven't
> > phrased this
> > right)
> >
> > I have had a peek at the IP Filtering screens under Ops navigator
> > but it is
> > not as helpful as I would like, particularly not for getting
> > started. Does
> > anyone have any suggestions or samples to get this underway. I have
> > configured the hideous AS/400 firewall in the past (it 
> wasn't a complex
> > configuration) so I have had some exposure to configuring 
> firewall rules,
> > but the IP Filtering screens and the firewall screens are light
> > years apart.
> >
> > Any comments on the strategy our customer has adopted or how to
> > get started
> > and especially any perceived pitfalls are welcome.
> >
> > And of course feel free to ask me to make myself clear or 
> provide more
> > information :)
> >
> > regards
> > Evan Harris
> >
> > +---
> > | This is the WEB400 Mailing List!
> > | To submit a new message, send your mail to WEB400@midrange.com.
> > | To subscribe to this list send email to WEB400-SUB@midrange.com.
> > | To unsubscribe from this list send email to 
> WEB400-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator:
> > david@midrange.com
> > +---
> >
> 
> 
> +---
> | This is the WEB400 Mailing List!
> | To submit a new message, send your mail to WEB400@midrange.com.
> | To subscribe to this list send email to WEB400-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> WEB400-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---