RE: Turn off PING server on AS/400

["Mark A. Manske" <mmanske@xxxxxxxxxxxxxxxxxx>]

I could be jumping in late, but,
the best way would be a router, and you 
can configure that to "not respond" to a ping.

You can then also set up the router to forward 
only specific ports to your AS/400.

With that said, you would not even have to 
worry about ftp, telnet, or other outside
programs attempting to get in.

That was how we did that here for serving the 
internet site off the AS/400.

We even came in on a different port other than 80,
just to give the hackers a little bit more to search for.



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of York, Albert
Sent: Wednesday, May 12, 2004 4:35 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Turn off PING server on AS/400


Thanks Scott.

I have an AS/400 that I want to put on the Internet for a specific purpose.
I only want to have one port open, which I will handle with a socket server
program. I will turn all other TCP/IP servers off, including telnet.

Are you taking about an  external firewall, such as router? I wasn't
planning on using a router but I could if I have to.

Or is there a firewall on the AS/400 I can use?

Albert York                          

        -----Original Message-----
        From:   midrange-l-bounces@xxxxxxxxxxxx
[SMTP:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
        Sent:   Wednesday, May 12, 2004 2:19 PM
        To:     Midrange Systems Technical Discussion
        Subject:        Re: Turn off PING server on AS/400


        Hi Albert,

        > I need to be able to have the AS/400 not respond to PINGs without
shutting
        > down TCP/IP.
        >
        > I looked in the archives but I can't see anything about it.
        > Is there a simple way to do this?

        Ping is a little bit different from other TCP/IP applications, in
that
        there's no "ping server."  Ping is implemented at a lower-level,
it's part
        of the TCP/IP stack itself.

        The best way to disable it is by blocking ICMP echo packets with a
        firewall.

        Can I ask why you want to disable it?
        _______________________________________________
        This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list
        To post a message email: MIDRANGE-L@xxxxxxxxxxxx
        To subscribe, unsubscribe, or change list options,
        visit: http://lists.midrange.com/mailman/listinfo/midrange-l
        or email: MIDRANGE-L-request@xxxxxxxxxxxx
        Before posting, please take a moment to review the archives
        at http://archive.midrange.com/midrange-l.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.