another as400 internet security issue

[abacuscorp]

I found an interesting thing the other day. If you know an AS/400's IP address you can gain access from any remote PC with DSL, Cable modem, etc. by keying telnet, a space, followed by the IP address. When you hit enter a sign-on
screen appears seconds later. Another good reason to monitor user ids and passwords. No more qsecofr/qsecofr.

 

[iSeriesCodePoet]

If you system is on the internet you should have telnet blocked on the firewall and you should be running CAE SSL only. Most good (non-CAE) clients can also do SSL.

iSeriesCodePoet
iSeries Programmer/Lawson Software Administrator

http://www.koldark.net

See my progress to converting to linux.

http://linux.koldark.net

 

[flapeyre]

I access ours through a VPN via a firewall. Our AS/400 can FTP to remote sites, but only if we initiate the connection. Nothing inbound gets past the firewall.


"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."

--Leonardo da Vinci