RE: IP filtering

[CWilt@xxxxxxxxxxxx]

Steve,

You'd have to check with your networking guys but it shouldn't be a problem
for your inhouse people to access the DMZ but not the Internet itself.

Also, as someone else mentioned.  I don't think you really want IP
forwarding, more like a proxy server.  That being the case, you wouldn't
need to use the 170 at all.  In fact, I'm not sure the iSeries has a proxy
available or not.  I assume you could get one in PASE if nothing else.

Charles

> -----Original Message-----
> From: Steve McKay [mailto:steve.mckay@xxxxxxxxxxxxxx]
> Sent: Friday, January 09, 2004 5:14 PM
> To: midrange-l@xxxxxxxxxxxx
> Subject: Re: IP filtering
> 
> 
> 
> 
> This was my initial thought on how it should be done. 
> However, since the 170
> would live in the DMZ, we would have to direct both internal 
> and external
> users to that box.  My company is very peculiar with regard to who is
> allowed "Internet access" (not everyone gets it).  With this 
> being a HR
> system, all employees need to get to it and I don't think 
> "non-Internet"
> employees could hit a box in the DMZ.  Our goal is to make 
> the intranet site
> available to employees both at work and at home.  Were you 
> able to access
> your model 400 from both work and home?  Does your company 
> restrict Internet
> access at work?
> 
> Yes, we could replicate our current internal UI to the 170 
> but we're afraid
> it would be a support nightmare unless we could have the 170 
> as the initial
> point of access for both internal and external users.
> 
> Thanks for your help,
> 
> Steve
>