On Wed, 8 Jul 2009 14:12:43 -0500, Mark Zelden wrote:

>On Wed, 8 Jul 2009 10:01:55 -0700, Natarajan Mohan wrote:
>
>>... I am curious why IND$FILE is allowed and not FTP.
>>
>
>FUD!

Not necessarily.  In a previous job, there was a period of time that we had
a test system that was created by a snapshot copy of the complete production
environment.

This was for a big, unsupported upgrade to the operating system.  We know
that there would be no fallback to the old version once we made the cutover
and we wanted to be sure that our production streams would work.  Production
Control would run real jobs, but we didn't want them to access the network.

We were not trying to restrict file transfer from outside of the system, but
those transfers that were initiated by processes that ran on the test system.

We did in fact test those jobs that accessed the network by modifying them
to reference test IP addresses, but we didn't set them up that way every
time we made a new copy.  Because it was a snapshot copy on RVA, we were
able to make a new copy very easily and quickly.

The SMP/E maintenance was done from the production system and the target
zone was modified so that special effort was required to get the undesirable
network access.  The production system was not modified in that way.

-- 
Tom Marchant

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to