On 2015-01-05, at 09:24, Mike Wawiorko wrote: > Logon to TSO is an SNA session and not a (direct) IP connection. It may or > may not be from a tn3270 connection. If it is tn3270 the IP connection may > well be to another system and via a multi-session tool like TPX, > Supersession, Tubes, Multsess etc. where is the IP address and on which > system? > > As well as NAT many sites have a thin client with tn3270 on Citrix. > > Makes any attempt to deal with DoS or userid/password misuse on the TSO > system by blocking an IP address futile and probably likely to block genuine > users in many configurations. > Ah, yes. As Abby Sciuto might say, "He's bouncing off a dozen routers; it'll take me an extra 30 seconds to find the originating IP."
-- gil ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
