RE: FTP Server

["Chris Bipes" <chris.bipes@xxxxxxxxxxxxxxx>]

Does your customers have an FTP server?  If so, they can email a link
and then you download from them.  To make your only server available via
FTP is not a good idea from a security standpoint.  We have a dedicated
FTP server in our DMZ.  It is a standalone box running WS FTP Pro
Server.  We have our AS400 check and pull files off of the server,
reaching from inside network to DMZ network through a firewall.  The FTP
cannot reach our inside network.  We must NAT from inside to DMZ.

Our FTP server gets tens of thousands of invalid logon attempts each
day.  So far they have not guessed our profiles names, much less any
passwords.  Do you want that type of traffic against your iSeries?  FYI
we also use IDS system that adds a deny statement to the firewall which
stops the attack. 

 

Chris Bipes
Director of Information Services
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Bob Voltz
Sent: Wednesday, April 08, 2009 5:12 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: FTP Server

The business requirement is this:

We use our 520 as our only network server.  
We do not have any PC type servers at all.
We have customers who want to send us drawings.
The size of these drawings exceeds the limits of email.
Allowing these customers to FTP the drawings seems like a good solution.