RE: -- WEB400

We have implimented a firewall using the Sonicwall Pro firewall device.  It
saves a lot of time (only about 1-2 hours to setup, a few minutes a month to
maintain) compared to building a linux based firewall, but it can get pricey
when you have more than a few hundred users.  I believe ours was in the
neighborhood of $1200.  Sonicwall offers smaller and larger devices - if you
don't need all the options of the Pro model, try the DMZ.

-Chris

---------------------------------------------------------
Christopher A. Libby, Programmer/Analyst
Maine Public Service Company (www.mainepublicservice.com)
clibby@mainepublicservice.com (207) 768-5811 ext. 2210


> -----Original Message-----
> From: owner-web400@midrange.com [mailto:owner-web400@midrange.com]On
> Behalf Of Stone, Brad V (TC)
> Sent: Tuesday, July 17, 2001 8:05 AM
> To: 'WEB400@midrange.com'
> Subject: RE:
>
>
> Agreed.  Your choices for firewalls are endless these days, from dedicated
> units to linux boxes.
>
> Brad
>
> > -----Original Message-----
> > From: Christopher A. Libby [mailto:clibby@mainepublicservice.com]
> > Sent: Tuesday, July 17, 2001 6:47 AM
> > To: WEB400@midrange.com
> > Subject: RE:
> >
> >
> > I would strongly recommend getting a firewall device and
> > placing all these
> > machines in the DMZ.  Otherwise, there is the potential to
> > choke your AS/400
> > if one of these other servers has a lot of traffic.
> >
> > -Chris
> >
> > ---------------------------------------------------------
> > Christopher A. Libby, Programmer/Analyst
> > Maine Public Service Company (www.mainepublicservice.com)
> > clibby@mainepublicservice.com (207) 768-5811 ext. 2210
> >
> >
> > > -----Original Message-----
> > > From: owner-web400@midrange.com [mailto:owner-web400@midrange.com]On
> > > Behalf Of Evan Harris
> > > Sent: Tuesday, July 17, 2001 5:50 AM
> > > To: web400@midrange.com
> > > Subject:
> > >
> > >
> > > Hi guys
> > >
> > > we have a customer that wants to provide access to some
> > boxes behind the
> > > AS/400 directly, but still maintain security. A suggestion that
> > > has come up
> > > is to set IP forwarding on on the AS/400 and use IP
> > filtering to control
> > > the traffic that gets past the AS/400 (apologies if I haven't
> > > phrased this
> > > right)
> > >
> > > I have had a peek at the IP Filtering screens under Ops navigator
> > > but it is
> > > not as helpful as I would like, particularly not for getting
> > > started. Does
> > > anyone have any suggestions or samples to get this underway. I have
> > > configured the hideous AS/400 firewall in the past (it
> > wasn't a complex
> > > configuration) so I have had some exposure to configuring
> > firewall rules,
> > > but the IP Filtering screens and the firewall screens are light
> > > years apart.
> > >
> > > Any comments on the strategy our customer has adopted or how to
> > > get started
> > > and especially any perceived pitfalls are welcome.
> > >
> > > And of course feel free to ask me to make myself clear or
> > provide more
> > > information :)
> > >
> > > regards
> > > Evan Harris
> > >
> > > +---
> > > | This is the WEB400 Mailing List!
> > > | To submit a new message, send your mail to WEB400@midrange.com.
> > > | To subscribe to this list send email to WEB400-SUB@midrange.com.
> > > | To unsubscribe from this list send email to
> > WEB400-UNSUB@midrange.com.
> > > | Questions should be directed to the list owner/operator:
> > > david@midrange.com
> > > +---
> > >
> >
> >
> > +---
> > | This is the WEB400 Mailing List!
> > | To submit a new message, send your mail to WEB400@midrange.com.
> > | To subscribe to this list send email to WEB400-SUB@midrange.com.
> > | To unsubscribe from this list send email to
> > WEB400-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator:
> > david@midrange.com
> > +---
> >
> +---
> | This is the WEB400 Mailing List!
> | To submit a new message, send your mail to WEB400@midrange.com.
> | To subscribe to this list send email to WEB400-SUB@midrange.com.
> | To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>


+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---