How to make AS/400 FTP use a proxy
Aaron
I would like to use the FTP client on the AS/400, but I am not sure
how or even if I can enable it to use the proxy. Just to be clear I
mean typing FTP from a 5250 session, not a PC based FTP program. We
are on V4R2.
Thanks.
Aaron
On Fri, 09 Jul 1999 13:48:39 GMT, i_hat...@noaddress.com (Aaron)
wrote:
>We have the AS/400 Firewall installed and have a SOCKS proxy enabled.
Paul Nicolay
I don't think the AS/400 FTP client can use a socksified proxy server. (it
would mean that you can enter the proxy address somewhere, and I wouldn't
know where).
What you could try is to follow the guidelines in the Webmaster guide (oeps,
you need V4R3) to setup a proxy on your AS/400, and configure it as a
chaining socksified proxy. This will at least use your current socks
server, but once again... I don't see how the AS/400 FTP client would use
this.
Anyway a SOCKS server... why not define a transparent gateway for the AS/400
itself. A socks server isn't a nice example of secure firewalling, so maybe
you should review that issue (BTW, if I here socks... I immediatly think
about MS Proxy... yuck).
Kind regards,
Paul
-------------------
Aaron wrote in message <378f019e...@news.cjnetworks.com>...
The contents of this message express only the sender's opinion.
This message does not necessarily reflect the policy or views of
my employer, Merck & Co., Inc. All responsibility for the statements
made in this Usenet posting resides solely and completely with the
sender.
Michael Shuldman
> We have the AS/400 Firewall installed and have an SOCKS proxy enabled.
> I would like to use the FTP client on the AS/400, but I am not sure
> how or even if I can enable it to use the proxy. Just to be clear I
> mean typing FTP from a 5250 session, not a PC based FTP program. We
> are on V4R2.
If you have some C/UNIX programming experience, or access to people
with it, you might try to port one of the available unix socks
implementations (e.g. NEC socks, http://www.socks.nec.com or our
own Dante, http://www.inet.no/dante, check the license on both).
Other than that I'm not aware of any option for as/400 unfortunately.
--
_ //
\X/ -- Michael Shuldman <mich...@inet.no>
Michael Shuldman
> Anyway a SOCKS server... why not define a transparent gateway for the AS/400
> itself. A socks server isn't a nice example of secure firewalling, so maybe
> you should review that issue (BTW, if I here socks... I immediatly think
> about MS Proxy... yuck).
I can only wonder why. Microsoft has nothing to do with socks,
which is a Internet standard and described in the rfc's.
I can agree with you on the "yuck" though. ;-)
Patrick Townsend
If you need to open a connection to an FTP server on a non-standard port
just start the session with a bad domain name like this "ftp xxxx". Then
in the FTP session do an explicit open to the target FTP server
specifying the port number. If the proxy server needs a special log on
string just enclose the parameter in quotes. If you don't the FTP client
will assume a parameter break at each blank.
Patrick
Aaron wrote:
>
> Just keeping this message alive - hoping someone will help.
>
> On Fri, 09 Jul 1999 13:48:39 GMT, i_hat...@noaddress.com (Aaron)
> wrote:
>
> >We have the AS/400 Firewall installed and have a SOCKS proxy enabled.
> >I would like to use the FTP client on the AS/400, but I am not sure
> >how or even if I can enable it to use the proxy. Just to be clear I
> >mean typing FTP from a 5250 session, not a PC based FTP program. We
> >are on V4R2.
> >
> >Thanks.
--
IBM AS/400 communications, FTP automation, and network security
software and consulting services.
Martin Ferreira
Sorry I could not resist.
What you have to do is to go into client access(operations navigator),
socks tab and define the network or IP address to wish to go to and the
IP address of the firewall.
I do not know how else to configure this step without client access
You must the go to your firewall configuration, socks, and define a
daemon. The daemon will read something like permit, from: 'as400 IP' to:
'external IP' command B + C.
You will now be able to use command line or batch ftp on/from the AS400.
Martin
> -----Original Message-----
> From: mich...@inet.no (Michael Shuldman) [SMTP:mich...@inet.no]
> Posted At: Friday, July 16, 1999 10:18
> Posted To: misc
> Conversation: How to make AS/400 FTP use a proxy
> Subject: Re: How to make AS/400 FTP use a proxy
>
> Aaron (i_hat...@noaddress.com) wrote:
> > We have the AS/400 Firewall installed and have an SOCKS proxy
> enabled.
> > I would like to use the FTP client on the AS/400, but I am not sure
> > how or even if I can enable it to use the proxy. Just to be clear I
> > mean typing FTP from a 5250 session, not a PC based FTP program. We
> > are on V4R2.
>
> If you have some C/UNIX programming experience, or access to people
> with it, you might try to port one of the available unix socks
> implementations (e.g. NEC socks, http://www.socks.nec.com or our
> own Dante, http://www.inet.no/dante, check the license on both).
> Other than that I'm not aware of any option for as/400 unfortunately.
>
Aaron
destination information set up for SOCKS. If I add an entry for a
specific IP address, will it screw up our other interfaces.
Example:
Lets say I have two ethernet networks installed. NetworkA has the
firewall/proxy on it. NetworkB is in house without any Internet
connection. If I add and entry for a public IP address and tell it to
use the SOCKS server on NetworkA, will existing users on NetworkB
remain uneffected?
Martin Ferreira
use this route to get to it. E.G. Your internal address is 192.168.xx
and you want the AS400 to get to 196.4.160.x , then you would put a
socks entry in the AS400. Unless you are duplicating addresses there
should be no change to any other routes.
Martin
Just Curious
the Operations Navigator.
Lets say my AS/400's IP address is 192.168.10.10 and the address I
want to reach is 150.150.150.150. I created a entry in the SOCKS for
addresss 150.150.150.150 netmask 255.255.255.0 and then the address &
port of our SOCKS server.
I still can not get the FTP on the AS/400 to go to this address. Do I
also need and entry in the TCP Routes Table on the AS/400? Should I
add an route like 150.150.150.0 & netmask of 255.255.255.0?
Thank you.
On Fri, 13 Aug 1999 17:02:39 +0200, Martin Ferreira
Martin Ferreira
Good luck