Re: V6R1 (QGPL/QUSRSYS) question. -- MIDRANGE-L

It's reasonable to point out that security is another factor in using a host table. For instance if you regularly move data (in any method) between your system and the bank or trusted trading partners one of the methods bad guys use to get into the middle is to hijack the DNS entry. Having your own address resolution for sensitive connections is not a bad idea. Stops that practice cold.

When I travel, I always put the sensitive addresses in my host file on my laptop so I know I am connecting to the correct place regardless of what DNS might say, since I don't know the DNS provider etc.

Of course you can run your own DNS but then you also have to be careful it's not hijacked if it is allowed to interface with the outside world and since most of the look ups happen out there anyway, well you get the point.

Paranoid, maybe, good practice, I would allow debate, however many auditors seem to think it's a good idea.

Jim Oberholtzer
CEO/Chief Technical Architect
Agile Technology Architects, LLC

On 4/23/2010 7:40 AM, Jack Kingsley wrote:

*This message was transferred with a trial version of CommuniGate(r) Pro*
Rob, good point, unfortunately we use the host table entries otherwise I
wouldn't want to mess with them, in any event I need to know if there was
any easy way to accomplish this.

On the second one, that would be nice but I don't have that luxury
currently.

On Fri, Apr 23, 2010 at 8:07 AM,<rob@xxxxxxxxx> wrote:

1 - Should your hosts file really have that many entries? There's a
concept called "DNS" for Domain Name Service - embrace it.
2 - Bwahaha (evil laugh). I was always concerned with these "let's
pretend we're still running an AS/400 and try skipping releases, on to a
new box" upgrades. I suggest you upgrade the older box to V6R1.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

From: DrFranken<midrange@xxxxxxxxxxxx>
To: midrange-l@xxxxxxxxxxxx
Date: 04/22/2010 09:25 PM
Subject: Re: V6R1 (QGPL/QUSRSYS) question.
Sent by: midrange-l-bounces@xxxxxxxxxxxx

WELLLLLLLLLLL Here's the thing.

With V6R1 the file Qusrsys/QATHOHOST member HOSTS (Memory here, don't
quote me on that) is deprecitated, meaning the actual data is stored
somewhere else now. So if what you are really after is just the 'HOSTS'
file then this may not be your best option. You see the issue is that as
of V6R1 you can have more than 4 host names per IP address *AND you can
now put IPV6 addresses in there. As a consequence it's more than simply
restoring the correct ifle from QUSRSYS to get the hosts table updated.

I wish I could give you an awesome simple method to move just the hosts
file but sadly I cannot.

- DrFranken

On 4/22/2010 4:04 PM, Jack Kingsley wrote:

New box install but I need to port over HOST table file from QUSRSYS and
some misc objects from QGPL.

Is it better to go to restricted state then restore the V5R4 versions of
QGPL and QUSRSYS libraries then reinstall B2924_01 (QGPL/QUSRSY) again

or is

there a simplier method.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.