Re: Blocking an IP address

["Urbanek, Marty" <Marty_Urbanek@xxxxxxxxxxxx>]

Me too, but I cound an article that says they were introduced at V4R3.
http://www.ibmsystemsmag.com/i5/november03/internet/8470p1.aspx

Here's a rule I used to block a specific address, 192.168.2.12, but I
know it was >V4R5 so I don't know if the syntax will be accurate. The
following is three lines of packet rules:

FILTER SET x   ACTION = DENY   DIRECTION = INBOUND   SRCADDR =
192.168.2.12   DSTADDR = *   PROTOCOL = *   DSTPORT = *   SRCPORT = *
JRN = OFF

FILTER SET ALL   ACTION = PERMIT   DIRECTION = *   SRCADDR = *   DSTADDR
= *   PROTOCOL = *   DSTPORT = *   SRCPORT = *   JRN = OFF

FILTER_INTERFACE   LINE = ETHLIN   SET = x, ALL

The second line is key because the default is to deny everything, IIRC,
therefore if you don't include line 2, you ain't talking no more. In
that case, use the life-saver command Larry posted.

-Marty

------------------------------

date: Thu, 08 Nov 2007 15:51:21 -0500
from: Larry Bolhuis <lbolhuis@xxxxxxxxxx>
subject: 

My mind is getting a tad rusty on V4R5 but I think filters were 
available then.  It's in iNav, Network, then IP Policies, then Packet 
Rules. Run the wizard and tell it the offending IP to block. Then apply 
it to your Ethernet line. Remember that if you FUBAR the whole thing you

can 'Undo' at the console with RMVTCPTBL *ALL :-)

 - Larry

Albert York wrote:
> Is there a way to block a specific address from accessing the AS/400?
I am on V4R5.
> Thanks,
>
> Albert