RE: Cal you telnet to an IBMi host on ports that you think you will be using for MQ and Connect DIrect if the host doesn't have the services running?

We kind of went through this. Our networking guy went gonzo slapping the cones of silence on stuff. He made some effort by monitoring ports and IP addresses for a significant interval. That doesn't catch everything, like rarely used stuff. I still can no longer get a SNDPTFORD to run to completion for large orders. I have to get it to a PC and then send it to the IBM i.
Of course, none of the restrictions apply to anything he uses. OTOH, being the security officer I'm sure some of my coworkers can see the parallel to that in me. It does help to build some empathy in me.

Rob Berendt