Re: More on iSeries web apps and security

[Mike Cunningham <mike.cunningham@xxxxxxx>]

I was just going there. Had the same idea after thinking more about it

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Haas, Matt (CL Tech Sv)
Sent: Thursday, May 14, 2009 1:40 PM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] More on iSeries web apps and security

A proxy server would be better suited for public access to something on an internal network. The DDOS would just bury the proxy server.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Nathan Andelin
Sent: Thursday, May 14, 2009 11:57 AM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] More on iSeries web apps and security


> From: Mike Cunningham
> making external users VPN to your inside network and not
> expose the web server to the internet at all.

Well, at least you're thinking in terms of using network services to prevent DDOS attacks rather than distributed application architecture. It seems that a VPN might work with employees and trusted business partners, but it doesn't sound very practical to me for student access to campus resources, because of added administrative costs.

Nathan.