Filtering HOST names in VAX/VMS server

[Sk Noorul Hassan]

Hi,

There are 4 UNIX servers accessing data from my VAX servers running with vms 7.1 & UCX 4.2 . Is it possible to put a filtering mechanism in VMS server so that it will only serve the request which comes from the those defined UNIX servers. It should not entertain any other servers with different IP addresses.

Please suggest.

[Volker Halle · Accepted solution]

Hi,

you can define an Accept Host list for each TCPIP service:

$ UCX HELP SET SERVICE /ACCEPT

Volker.

[Steven Schweda]

Accessing data how? DECnet? FTP? NFS? SMB? SSH?

[Sk Noorul Hassan]

Thanks.
Some of the applications accessing my VAX server are taking data through a dedicated socket created by the application and some of the applications using FTP. As the number of host list to be allowed is long, is it possible to use /REJECT qualifier to deny request to host.

[Dave Laurier]

Sure you can use the /REJECT qualifier. But make sure that it fits your needs.

The HOST option in the /REJECT allows a maximum of 32 hosts and the NETWORKS option in the /REJECT allows a maximum of 16 networks.

[Martin Vorlaender]

>>>
Some of the applications accessing my VAX server are taking data through a dedicated socket created by the application and some of the applications using FTP.
<<<

With UCX, you can only restrict access to known services ($ UCX SHOW SERVICE).

>>>
As the number of host list to be allowed is long, is it possible to use /REJECT qualifier to deny request to host.
<<<

Above you talked about 4 Unix machines. The /ACCEPT and /REJECT list take at most 16 entries (which can be hosts or networks).
If you use /ACCEPT, only those hosts/networks listed will be able to connect to the service.

cu,
Martin

[Wim Van den Wyngaert]

You can also put security on all tcp traffic instead of on service level.

See ucx help set comm.

Wim

[Sk Noorul Hassan]

Thanks for the information. How to see the list of host which I have defined in ucx using UCX set comm/reject or UCX set service/reject not to access my server.

[Joseph Huber_1]

SHOW COMMUNICATION /SECURITY