Re: Firewalls Vs Exit programs

[John Earl <johnearl@xxxxxxxxxxxxxxxxxx>]

All,

I just got a note from the knowledgable Mr Glanstein who reminded me that DDM 
does
not always require that the user supply a valid UserID and  password.  Also, an 
FTP
exit program can be configured (either on purpose or through sloppy 
misunderstanding)
to allow access without an valid UserID and Password.

I'm guessing that Steve's concern was that some folks would read this portion 
of my
post and get lulled into complacency.

John Earl wrote:

> Exit Programs are usefull for limiting the functions of users who already have
> access to your AS/400.  All of the exit points require that the user login 
>with a
> valid Usrprf and Password, so what you're trying to do here is limit their 
>access
> via tools such as FTP, DDM, OBDC, etc.

Steve is correct that there DDM and FTP are just two of several methods that can
allow access to the AS/400 without a password.  Properly configured Exit 
Programs can
protect against these two threats, but  as shipped the AS/400 will allow DDM 
access
without a password.

I still stand by the broad deliniation between Firewalls (controls external 
network
traffic) and Exit programs (controls internal network access to AS/400s).   The
purpose of my post was to stress that Firewalls and Exit Programs are not 
mutually
exclusive, they're complimentary.


jte


--
John Earl                                           johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---