1) One of the advantages of IBM is 'the IBM guy.'  This can also be one of their
dis-advantages.  At this point in the game I would think that changing to
something else is out of the question.  There is a good chance that what they
are proposing is 'ok' and not fantastic.  I would use the time to learn more.

2) Question ..
I would think opening up the MS SQL port across the Internet is dangerous - what
are some thoughts on having a database port open on the Internet?  I know it
scares me - but it would provide a answer to a problem that I may have to solve
soon.

-Thanks in Advance
Steve Wolfe

Ronneil Camara wrote:

> Hi everyone. We'll be starting the pre-staging of our project next week. I
> was tasked to test the effectiveness of the IBM Firewall for AIX. So what
> tools can you suggest to test against this IBM firewall? Would nmap for
> linux be enough to test the IBM firewall? I think, nmap can only do os
> fingerprinting, checking of opened ports, am I right?
>
> I need firewall gurus advice here :-)
>
> Btw, on wednesday, I will submit to the IBM engr. the ports that needs to be
> opened. I need MsSQL to be opened and I found out in services file that
> run's on 1433/tcp.  So I asked one of my colleage to do a connection to the
> MsSQL server using ODBC, I run ethereal for linux to capture that packets, I
> found out that it was talking to MsSQL through \PIPE and SMB something. I
> was expecting the port 1433 to appear on the capture packet but it didn't.
> Any ideas?

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to