Re: How to bind FTP to a specific address.

["Michael Ryan" <michaelrtr@xxxxxxxxx>]

I use the preferred interface technique when accessing remote systems
- I didn't know it didn't work with local systems. We have to do that
with a trading partner because their firewall is configured for one of
our interface addresses. We have two interfaces, and traffic would
always go out the 'lower' address, which is not the one configured by
the trading partner. I think the preferred interface technique will
work if the remote system is not on the same subnet as the iSeries
interface, and maybe Schowler routes would work if they were on the
same subnet?

On 7/26/07, Bryan Dietz <bdietz400@xxxxxxxxx> wrote:
> Rob.  I think you are going to need to use the Schowler Routes.
>
> <snip>
> Another common use of Schowler routes is to force local traffic out of a
> specific interface. Without Schowler routes, the system always uses the
> first *DIRECT route that it reads from the routing table and will use
> the local interface that is dynamically bound to that route when sending
> to a local system. Because *DIRECT routes are the highest precedence
> route, there is no way to configure the system to use a preferred
> interface. However, by creating Schowler routes, these *DIRECT routes
> become Indirect routes and, therefore, other routes (for example, host
> routes) can be configured to have higher precedence than these Schowler
> routes.
> </snip>
>
> http://www-1.ibm.com/support/docview.wss?rs=0&context=SWG60&dc=DB520&dc=D900&dc=D800&dc=DA900&dc=DA800&q1=schowler+AND+AS400KBXXYYZZRCH&uid=nas1eb95209430bbcb7486256d170047484a&loc=en_US&cs=UTF-8&lang=all
>
> Bryan
>
> rob@xxxxxxxxx said the following on 7/26/2007 9:38 AM:
> > Yeah, the remote site expects it to come from a particular IP address.
> > I can "fix" one situation.  When I ftp from one lpar to a lpar in the DMZ
> > I can open up the exit point on the lpar in the dmz to accept the whole
> > range of addresses served by this source lpar.
> > However the other situation requires I talk to the "consultant".
> > Apparently certain bar code printers accept ftp commands.  And these are
> > locked down by the IP address they expect communications to come from.
> >
> > Rob Berendt
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.