Re: How to prevent user connect with ids
Other option... Man I cannot belive I forgot it... Then again I don't know if it is an option in AIX 5.2 (it is in AIX 5.3). Start Filters and the highest level for getting to configurations; smitty ipsec4 smitty ipsec6 More Options to allow for configurations; smitty ips4_advanced smitty ips6_advanced Configure Rules for Filter this is where you can get to set what is really needed; smitty ips4_conf_filter smitty ips6_conf_filter High Level Notes about it for AIX 5.3; http://www-03.ibm.com/systems/p/security/feature/enhancements.html Some more Details; http://publib.boulder.ibm.com/infocenter/pseries/v5r3/index.jsp?topic=/com.ibm.aix.security/doc/security/ipsec_migrate_filters.htm Note I have not completed testing of this option. The nice thing is I can allow for some host to reach the server when others are not allowed. Remember like with most firewalls once a rule is reached that fits the packet processing stops. So make sure allows are before deny. Eric B. Rowell http://www-03.ibm.com/servers/aix/os/52desc.html On 12/18/06, Ian Michael Gumby <im_gumby@hotmail.com> wrote: > > Uhm yeah that would work. > > If you don't have any TCP/IP connection defined in your > $INFORMIXDIR/etc/sqlhosts > that would be the safest if you don't want *ANY* outside connection. The > major drawback would be if you had a 4gl app that was on another machine.... > > Another solution would be to write you own PAM module ... > But thats another story and a bit harder to do, provided that Informix is > fully supporting PAM in both 32 and 64 bit configs. > > > > >The shared memory option is preferred but my second favorite... Use > >the localback as your host address. This will prevent any network > >outside of the local system (without a route being configured) to > >attach to the serverl. Again preferred is shared memory... Don't > >configure any TCPIP at all. > > > >Eric B. Rowell > > > > > >On 18 Dec 2006 09:15:26 -0800, scottishpoet <dryburghj@yahoo.com> wrote: > > > set up shared memory connections and use that connection protocol for > > > your 4gl prgrams > > > > > > don't set up any tcpip connections > > > > > > > > > roger@star2000.com.tw wrote: > > > > Hi, > > > > MY box is ids 9.40 on AIX 5.2. > > > > How can I make a user that he can telnet to the AIX and run 4gl > > > > program, > > > > But prevent him from connecting to the informix server from Delphi & > > > > client -sdk ? > > > > > > _______________________________________________ > > > Informix-list mailing list > > > Informix-list@iiug.org > > > http://www.iiug.org/mailman/listinfo/informix-list > > > > >_______________________________________________ > >Informix-list mailing list > >Informix-list@iiug.org > >http://www.iiug.org/mailman/listinfo/informix-list > > _________________________________________________________________ > Your Hotmail address already works to sign into Windows Live Messenger! Get > it now > http://clk.atdmt.com/MSN/go/msnnkwme0020000001msn/direct/01/?href=http://get.live.com/messenger/overview > >