Re: Internet to AS/400 session

[Gary L Peskin <garyp@xxxxxxxxxxxx>]

Dale --

Why not propose a VPN (Virtual Private Network) solution.  This will
encrypt all traffic between the client and the host or firewall,
depending on how you set it up.

I don't fully understand how opening the firewall to VPN Telnet/FTP
traffic would allow someone to defeat the firewall by "poking around." 
Perhaps you could get specifics on this.

There are plenty of companies that allow this type of remote access.

Gary

"Draper, Dale" wrote:
> 
> I forwarded some of your emails to our network guy asking him if he could
> configure this for a couple of our offsite people, this was his reply:
> 
> "yes.  one big one..  SECURITY.!!!  i would open a hole in the FW to allow
> all ipaddresses to that machine.  over the specfic ports... but one may
> defeat the firewall by trying to poke arround an possibly gain whron
> access..  i have strong feelings against this and whould have to be taken up
> with the director."
> 
> Are his concerns warranted, or is he being careful out of ignorance?
> 
> Dale Draper
> Sega Enterprises, Inc. (USA)
> Dale.Draper@seu.sega.com
> 
> > -----Original Message-----
> > From: Carl Galgano [SMTP:cgalgano@ediconsulting.com]
> > Sent: Monday, August 23, 1999 1:19 PM
> > To:   MIDRANGE-L@midrange.com
> > Subject:      Re: Internet to AS/400 session
> >
> > Joe:
> > You need to talk to your firewall folks.  The firewall must allow inbound
> > telnet traffic and route it to the proper port (probably 23) on the
> > internal
> > IP address of the AS400.  It is really hard to give you any specific
> > advice
> > without knowing your firewall and configuration.  Good luck.  It IS
> > definitely possible.
> > CJG
> > Carl Galgano
> > EDI Consulting Services, Inc.
> > 540 Powder Springs Street
> > Suite C19
> > Marietta, GA  30064
> > 770-422-2995
> > mailto: cgalgano@ediconsulting.com
> > http://www.ediconsulting.com
> > EDI, Communications and AS400 Technical Consulting
> >
> > -----Original Message-----
> > From: Joe.Lutterman@wengercorp.com <Joe.Lutterman@wengercorp.com>
> > To: MIDRANGE-L@midrange.com <MIDRANGE-L@midrange.com>
> > Date: Monday, August 23, 1999 4:06 PM
> > Subject: Internet to AS/400 session
> >
> >
> > >
> > >
> > >Does anyone know how to obtain access to an AS/400 session from an
> > internet
> > >connection?
> > >I also have a firewall between internet and AS/400.
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---