System i web accessibiltiy setup

["Kevin Touchette" <KTouchette@xxxxxxxxxxxx>]

Hello,

 

  We are faced with putting our system I boxes on the web and I was
wondering how you all handle this?  Currently we have a system where
we've put two network cards in the system.  One is set up to allow only
port 80 traffic to it with routes set up appropriately assigned to an
external tcp/ip address.  It sets up a pseudo DMZ scenario. 

 

  The question that I have is, 1) Do any of you have a set up similar to
this?  2) Is this scenario "secure enough"?  I know that it is not
necessarily the "recommended" approach but it gives flexibility in it's
setup for taking down certain sites and not others etc.

 

  Another question is there a web site or place where there are reported
system I web hacks or breaches through the web?  This has become a large
topic in our shop and something that looks like it could become a holy
war between system I and Microsoft servers.

 

  Feedback is appreciated.

 

Thank you,

 

Kevin R. Touchette