Re: FTP With Server Down

["alan shore" <SHOREA@xxxxxxxx>]

That was my thoughts, but believe me the FTP server (ALL 3 of them) were NOT up 
and running when I tried my test using DOS on my pc. Lo and behold I was able 
to communicate, PUTing and GETting. If anyone tells me this is not possible, 
believe me it is.

>>> <thomas@inorbit.com> 09/13/01 09:37PM >>>
Alan:

On Thu, 13 September 2001, "Alan Novick" wrote:

> Is there a way to find out if someone is trying to access the AS/400 via FTP
> even though my FTP server is shut down?


If your FTP server is not active, an exit program will never be called for 
access attempts from the outside. You have limited options, possibly the most 
common would be by reviewing logs from your firewall. Recent releases of OS/400 
include a simple "firewall" that could probably give you what you need if you 
have no formal firewall to rely upon.

Or you could always write a simple sockets program that simply sat on the FTP 
port and logged everything that hit it.

Beyond that, something like comm traces is about all there is. Whether that 
means an actual STRCMNTRC or some appliance or whatever on your network is open 
for imagination.

Also, keep in mind that your AS/400 also has an FTP client in addition to the 
server. If your AS/400 is being "accessed" through the native FTP client, then 
the server does not need to be active; the server will be on some other system. 
For this, an exit program against the client exit points could be useful. Of 
course, simple auditing of related objects might be just as useful.

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/




_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.