SSL and Firewall Fun

["Steve Glanstein" <mic@xxxxxxxxx>]

Hello all:

I am working with a firewall that is permitting the SSL ports (9470-9) as
well as the well known 449 and 992 ports for SSL access from the Internet.

We specifically don't permit 23 or 8470-9 because they are not encrypted.

It appears that no matter what I do with client express (V4R4 latest service
pack) it attempts to connect initially to 8476 (which is service as-signon)
instead of 9476 (which is as-signon-s).

Redirecting 9476 to 9476 via services won't help because the AS/400 host
program bound to 9476 doesn't speak 8476 language!

Does anybody have any ideas? We definitely don't want to open up 8476
because it could defeat the entire purpose of SSL by sending an unencrypted
password via the net...

Thanks,

Steve Glanstein
mic@aloha.com