Many Thx. Looks to be quite useful for limiting access by machine in
environments where IP addresses are tightly controlled.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 11, 2004 3:45 PM
To: [EMAIL PROTECTED]
Subject: Re: Many Client connections - how many svrconn channels -
BlockIP 2
G'Day Dennis,
Here is a link to BlockIP2, it doesn't appear in google because it looks
like it is not an absolute path in the URL and hence not findable by
page scrapping.
http://www.mrmq.dk/index.htm?tips_and_tricks.htm#BlockIP2
Sid
-Original Message-
From: Miller, Dennis [mailto:[EMAIL PROTECTED]
Sent: Friday, 12 March 2004 8:38 AM
To: [EMAIL PROTECTED]
Subject: Re: Many Client connections - how many svrconn channels?
I don't see the point of dedicating svrconn's to a specific number of
clients. Dedicating a svrconn a specific MCAUSER and sharing it among
many clients is a different story. Seems you would only need one
MCAUSER+srvrconn for each authority level.
But to gain a semblence of security from either of those schemes, you
still need to control client access to the srvrcon's. Not sure how you
accomplish that. Unfortunately, I do not know what BlockIP2 is
about(and neither does Google).
-Original Message-
From: Ruzi R [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 11, 2004 12:35 PM
To: [EMAIL PROTECTED]
Subject: Many Client connections - how many svrconn channels?
Hi all,
We have over 200 users requiring client connection
from their Windows2000 workstations to the queue
managers on Windows 2000 (WMQ 5.3). The company does
not have and is unwilling to buy any third product
right now or in the foreseeable future.
I have set up 10-15 users with a dedicated SVRCONN
channels with the MCUSER set to their respective
userids and giving each userid a limited access. I
have started using BlockIP2 as well. I have brought
up the use of SSL but the company is reluctant to do
that (I don t know about all the concerns surrounding
the issue probably something political that I don t
get involved in as a contractor).
Because I want to make the client connections as
secure as possible with what I have at my disposal, I
feel that I should set up the rest of the 200 clients
(most of whom will be in the Prod env.) the same way
as the others: Dedicated svrconn channel with MCAUSER
populated with a userid having limited access, and
IPBlock2. But then again, since all of the interfaces
are internal, maybe I could dedicate 1 svrconn to,
say, 20 people. I can still give limited access to the
users, leave the MCUSER blank and specify the valid IP addresses in
IPBlock2. What do you think? Any ideas/insights would be much
appreciated.
Thanks in advance,
Ruzi
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
