topic Re: Filtering HOST names in VAX/VMS server in Operating System - OpenVMS

Filtering HOST names in VAX/VMS server

Sk Noorul Hassan — Fri, 12 May 2006 08:57:10 GMT

Hi,

There are 4 UNIX servers accessing data from my VAX servers running with vms 7.1 & UCX 4.2 . Is it possible to put a filtering mechanism in VMS server so that it will only serve the request which comes from the those defined UNIX servers. It should not entertain any other servers with different IP addresses.

Please suggest.

Re: Filtering HOST names in VAX/VMS server

Volker Halle — Fri, 12 May 2006 09:04:15 GMT

Hi,

you can define an Accept Host list for each TCPIP service:

$ UCX HELP SET SERVICE /ACCEPT

Volker.

Re: Filtering HOST names in VAX/VMS server

Steven Schweda — Fri, 12 May 2006 10:54:37 GMT

Accessing data how? DECnet? FTP? NFS? SMB? SSH?

Re: Filtering HOST names in VAX/VMS server

Sk Noorul Hassan — Mon, 15 May 2006 04:13:39 GMT

Thanks.
Some of the applications accessing my VAX server are taking data through a dedicated socket created by the application and some of the applications using FTP. As the number of host list to be allowed is long, is it possible to use /REJECT qualifier to deny request to host.

Re: Filtering HOST names in VAX/VMS server

Dave Laurier — Mon, 15 May 2006 04:19:06 GMT

Sure you can use the /REJECT qualifier. But make sure that it fits your needs.

The HOST option in the /REJECT allows a maximum of 32 hosts and the NETWORKS option in the /REJECT allows a maximum of 16 networks.

Re: Filtering HOST names in VAX/VMS server

Martin Vorlaender — Mon, 15 May 2006 04:22:02 GMT

>>>
Some of the applications accessing my VAX server are taking data through a dedicated socket created by the application and some of the applications using FTP.
<<<

With UCX, you can only restrict access to known services ($ UCX SHOW SERVICE).

>>>
As the number of host list to be allowed is long, is it possible to use /REJECT qualifier to deny request to host.
<<<

Above you talked about 4 Unix machines. The /ACCEPT and /REJECT list take at most 16 entries (which can be hosts or networks).
If you use /ACCEPT, only those hosts/networks listed will be able to connect to the service.

cu,
Martin

Re: Filtering HOST names in VAX/VMS server

Wim Van den Wyngaert — Mon, 15 May 2006 10:22:46 GMT

You can also put security on all tcp traffic instead of on service level.

See ucx help set comm.

Wim

Re: Filtering HOST names in VAX/VMS server

Sk Noorul Hassan — Thu, 18 May 2006 09:52:26 GMT

Thanks for the information. How to see the list of host which I have defined in ucx using UCX set comm/reject or UCX set service/reject not to access my server.

Re: Filtering HOST names in VAX/VMS server

Joseph Huber_1 — Thu, 18 May 2006 10:12:36 GMT

SHOW COMMUNICATION /SECURITY