RE: Restriction port range of Endpoint

Used it before on Windows XP and 2000
server endpoints on one of my previous projects. Though I can't recall
which of the 411 version endpoint we were using then, we never had issues
with it. In fact it helped us keep away from having to install the Tivoli
Firewall Tool.

Kindly,
Napo 
***************************************************************
JPMorganChase - Systems & Service Management Tools Engineer
Tel: 614-213-8599
Pager: 888-636-2381
"If you look in your dictionary, you'll find that the meaning of the
word 'single' is not single!" - UNKNOWN
************************************************************* 


Joel N Mokoetle

Gary Hamilton <HAMILGAR@xxxxxxxxxx> Sent by: owner-tme10@xxxxxxxxxxxxxxxx 02/25/2005 10:42 AM Please respond to tme10

To:        tme10@xxxxxxxxxxxxxxxx         cc:                 Subject:        RE: [tme10] Restriction port range of Endpoint

Yes, this is fixed.


Gary R. Hamilton
Team Leader
Senior Software Engineer
IBM Software Group - Tivoli Software (UK)
Global Response Team - Europe/Middle East/Africa
+44(0)1753-780-988
mobile: +44(0)780-820-3714
e-mail:hamilgar@xxxxxxxxxx
____________________________________________
AskTivoli -  http://www-3.ibm.com/software/sysmgmt/products/support/
Web PMR submission - http://www-3.ibm.com/software/support/probsub.html


                    
                     
                     
          
             "Loren Cain"  
                     
                     
   
             <loren.cain@digic  
                     
                    
             onasp.com>    
                     
                     
To 
             Sent by:      
           <tme10@xxxxxxxxxxxxxxxx>
           
             owner-tme10@lists    
                     
               cc 
             .us.ibm.com      
                     
                     
                    
                     
                     
  Subject 
                    
                  RE: [tme10]
Restriction port range  
             25/02/2005 15:33    
     of Endpoint            
            
                    
                     
                     
          
                    
                     
                     
          
             Please respond to    
                     
                  
                   tme10  
                     
                     
    
                    
                     
                     
          
                    
                     
                     
          




I only tried to use it once, and it consistently crashed
my Windows 2003 endpoints, so I turned it off. That was
at lcf v41108, or possibly the version just prior to that.
I believe I saw an apar referencing that problem, so it may
have been fixed, but since I didn't really need the feature
I never tried to turn it back on.

Loren Cain
Digicon

-----Original Message-----
From: owner-tme10@xxxxxxxxxxxxxxxx [mailto:owner-tme10@xxxxxxxxxxxxxxxx]
On Behalf Of Duffy, Brian (OFT)
Sent: Friday, February 25, 2005 10:05 AM
To: tme10@xxxxxxxxxxxxxxxx
Subject: RE: [tme10] Restriction port range of Endpoint

Are there any performance disadvantages associated with the proxy upcall
feature?


Brian Duffy
brian.duffy@xxxxxxxxxxxxxxx

-----Original Message-----
From: owner-tme10@xxxxxxxxxxxxxxxx [mailto:owner-tme10@xxxxxxxxxxxxxxxx]
On Behalf Of Loren Cain
Sent: Friday, February 25, 2005 8:28 AM
To: tme10@xxxxxxxxxxxxxxxx
Subject: RE: [tme10] Restriction port range of Endpoint

The newer LCF versions have an "allow_proxy_upcalls"
option that you can set with the "wep" command:

allow_proxy_upcalls=true | false

Specifies  whether   all   communication
between  the  endpoint  and its assigned gateway use the
configured
target  port on  the  endpoint.  If  set to true,
the endpoint and
gateway  communicate  using the  target  port  only.
Before endpoint can
use proxy upcalls, the endpoint must
establish     a    connection    to  
 a
proxy-capable gateway. If set to  false, the  endpoint  and
 its
assigned gateway communicate as usual. This option  modi- fies the
value
of allow_proxy_upcalls in the last.cfg file. The default is false.


Loren Cain
Digicon


-----Original Message-----
From: owner-tme10@xxxxxxxxxxxxxxxx [mailto:owner-tme10@xxxxxxxxxxxxxxxx]
On Behalf Of Grzegorz Blazowski
Sent: Friday, February 25, 2005 7:40 AM
To: tme10@xxxxxxxxxxxxxxxx
Subject: [tme10] Restriction port range of Endpoint

Is there any possibilities to restrict destination port range in
communication Gateway->Endpoit?
odadmin set_port_range sets source port range for the gateway but gw
still sends data to the unlimited ports of destinated endpoint.
Any tricks?
Grzegorz Blazowski
Incenti - OPD Wroclaw












This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you.