Re: System i web accessibiltiy setup

["albartell" <albartell@xxxxxxxxx>]

> Another question is there a web site or place where there are reported
system I web hacks or breaches through the web?  This has become a large
topic in our shop and something that looks like it could become a holy war
between system I and Microsoft servers.

I think first you need to determine what you are trying to protect against.
Some "hacks" are platform agnostic (i.e. DOS attack, AJAX vulnerabilities,
etc).  In my mind the iSeries is much less susceptible to hacks than
Microsoft, partially because of popularity, and partially because of OS
architecture.

Maybe post what the Microsoft evangelists are saying and we iSeries
evangelist can dissect their concerns.  We need evangelists in here
somewhere if we are having a holy war, right? :-)

Aaron Bartell
http://mowyourlawn.com

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of Kevin Touchette
Sent: Monday, January 29, 2007 11:49 AM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] System i web accessibiltiy setup

Hello,

 

  We are faced with putting our system I boxes on the web and I was
wondering how you all handle this?  Currently we have a system where we've
put two network cards in the system.  One is set up to allow only port 80
traffic to it with routes set up appropriately assigned to an external
tcp/ip address.  It sets up a pseudo DMZ scenario. 

 

  The question that I have is, 1) Do any of you have a set up similar to
this?  2) Is this scenario "secure enough"?  I know that it is not
necessarily the "recommended" approach but it gives flexibility in it's
setup for taking down certain sites and not others etc.

 

  Another question is there a web site or place where there are reported
system I web hacks or breaches through the web?  This has become a large
topic in our shop and something that looks like it could become a holy war
between system I and Microsoft servers.

 

  Feedback is appreciated.

 

Thank you,

 

Kevin R. Touchette

 

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To post a
message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.