Mark is right. It's not a valid restriction. <speculation> The rule was likely put in place by someone with only MVS "mainframe" knowledge. </speculation>
Even so, there are shops which had mainframes on the public internet 15+ years ago and there are shops *today* with mainframes on the public internet. It's a question of managing risk, which pre-requires understanding the risks, which in turn pre-requires understanding the systems. Be prepared for a long conversation with learning needed on both sides. -- R; <>< Rick Troth Velocity Software http://www.velocitysoftware.com/ On Wed, Mar 30, 2011 at 11:56, Ron Foster at Baldor-IS <rfos...@baldor.com> wrote: > Hello listers, > > Our company has recently been acquired by another company. We are at > the point of having to get our two networks to talk to each other. > Before we can do that, we have to comply with certain security rules. > One of them being that the mainframe cannot be exposed to the internet. > > We have a couple of zLinux web servers that are running in a couple of > z/VM guests that are connected to our DMZ. The new folks say this is a > show stopper as far as hooking up the two networks. > > The questions I have are: > > Is this a common restriction? That is, you have to have your DMZ based > web servers running on some other platform so that your mainframe is not > exposed to the internet. > > Or, the new folks just don't understand the built-in security provided > by the z10 and z\VM 6.1. > > I know that we will end up conforming to the rules that the new folks > have, but I was just wondering if the new folks really know what they > are talking about. > > Thanks, > Ron > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
