How turn off the proxy on VMS server

[Nahmad_1]

Hi There

We have some networked VMS servers in different locations and I want to turn off the proxy on a server for security reason but not sure how to do it ?

Thanks in advance

Ahmad

[Volker Halle]

Ahmad,

which 'proxy' are you talking about ?

DECnet proxy

$ MC AUTHORIZE SHOW/PROXY *::*

or

TCPIP proxy ?

$ TCPIP SHOW PROXY

Volker.

[Jan van den Ende]

Ahmad,

>>>
... I want to turn off the proxy on a server for security reason ...
<<<

Actually, proxies ARE CREATED for security reasons!

(carefully designed) proxies ONLY allow access from enumerated users, originating from enumerated systems (servers or clients); WITHOUT transmitting passwords over (usually non-secure) connections.
Especially in the cases where scripted non-interactive access occurs, they remove the need for embedding passwords in the script.

Now, if you need to remove some of the existing proxies, THAT is an entirely valid reason. How to do that, depends highly on the way the proxies are currently defined. If you currently have group proxies, they probably need to be replaced by enumeration of user<->remote-system pairs.

hth

Seasonal greetings.

Proost.

Have one on me.

jpe

[Hoff]

There are dozens of mechanisms called "proxies" within a modern network. There are Apache proxies, socks proxies, DECnet (Phase IV and Phase V) proxies, IP proxies, firewall proxies, SMTP proxies and the occasional open proxy, and undoubtedly a few other proxies I've missed. Which of these proxy constructs are you thinking of here?

For your own reference and without intending offense, here is a description of how to ask a question:

http://www.catb.org/~esr/faqs/smart-questions.html

That describes techniques that help you get the answer you need more quickly, and interestingly also describes techniques and considerations that can help you advance your own career.

[Wim Van den Wyngaert]

Note that in TCP there are NFS proxies (in and out) and communication proxies. The last ones are used to authorize a service. The service must have the flag APPLICATION_PROXY to enable the use of proxies. So, you can also remove the flag of the service definition if you want to remove the proxy selectively. Not tested because out of VMS machine.

Wim