Front cover -- Contents -- Notices -- Trademarks -- Preface -- The team that wrote this redbook -- Become a published author -- Comments welcome -- Part 1 Defining the applications -- Chapter 1. File Transfer Protocol -- 1.1 iSeries FTP server: Support for graphical FTP clients -- 1.2 iSeries FTP server: Configurable subsystem support -- 1.3 Security enhancements -- 1.3.1 iSeries FTP server: SSL/TLS secure connections -- 1.3.2 iSeries FTP server: Client authentication -- 1.3.3 iSeries FTP client: SSL/TLS support -- 1.3.4 iSeries FTP server and client: New defenses for hacker attacks -- 1.4 Restricting FTP functions via iSeries Navigator -- 1.5 TCPL0300 format for FTP server logon exit point -- 1.5.1 FTP problem determination -- Chapter 2. Telnet on the iSeries -- 2.1 Virtual device descriptions -- 2.2 QAUTOVRT system value -- 2.3 Telnet naming conventions for virtual devices/controllers -- 2.3.1 Unpredictable system-assigned devices -- 2.3.2 Specifically assigned Telnet session device names -- 2.4 Telnet device initialization and termination exit points -- 2.4.1 Registering an exit program -- 2.5 Mapping a Virtual device description to an IP address -- 2.6 Other Telnet enhancements -- 2.6.1 Connection feedback to the Telnet client -- 2.6.2 Number of servers to start -- 2.7 Extended administrative flexibility -- 2.8 Security -- 2.8.1 Prevent Telnet access -- 2.8.2 Control Telnet client access -- 2.8.3 Telnet exit program security -- 2.9 Telnet problem determination -- 2.10 More information -- Chapter 3. Connecting your iSeries to the Internet -- 3.1 Methods of connecting the iSeries to the Internet -- 3.1.1 Dial up connection to the Internet -- 3.1.2 Connect to the Internet from within the private network -- 3.1.3 Connect to the Internet from DMZ -- 3.2 System security settings -- 3.2.1 iSeries Navigator Security Wizard.

3.2.2 IBM eServer Security Planner -- 3.2.3 System values -- 3.2.4 Other security considerations -- 3.2.5 Security management -- 3.3 Choosing an ISP -- 3.3.1 Costing models -- 3.3.2 Services provided -- 3.4 Resources -- Chapter 4. iSeries mail services -- 4.1 Simple Mail Transfer Protocol (SMTP) -- 4.1.1 How SMTP works -- 4.1.2 Mail objects -- 4.1.3 Mailbox and address -- 4.1.4 SMTP commands -- 4.1.5 SMTP replies -- 4.1.6 SMTP mail flow -- 4.1.7 Address resolution and mail handling -- 4.1.8 SMTP implementation on iSeries server -- 4.2 Post Office Protocol (POP) -- 4.2.1 How POP3 works -- 4.2.2 POP3 commands -- 4.2.3 POP3 responses -- 4.2.4 POP3 states -- 4.2.5 POP3 implementation on iSeries server -- 4.3 e-mail problem determination -- 4.4 Lotus Domino on iSeries -- Chapter 5. Time protocols and applications -- 5.1 Simple Network Time Protocol (SNTP) on iSeries -- 5.1.1 Configuration of SNTP client -- 5.2 More information -- Part 2 Scenarios -- Chapter 6. Transferring files between systems -- 6.1 Sharing files between iSeries servers using QFileSvr.400 -- 6.1.1 Plan the configuration -- 6.1.2 Start the subsystem QSERVER on both AS23 and AS24 -- 6.1.3 Create a directory in QFileSvr.400 on AS23 -- 6.1.4 Create a symbolic link on AS23 -- 6.1.5 Test the configuration -- 6.1.6 Review, conclusions, and references -- 6.2 Sharing files between systems using NFS -- 6.2.1 Plan the configuration -- 6.2.2 Create the netgroup AS24_allowed_clients -- 6.2.3 Export the directory through NFS on AS24 -- 6.2.4 Start the NFS server on AS24 -- 6.2.5 Mount the directory on AS23 -- 6.2.6 Test the configuration -- 6.2.7 Review and conclusions -- 6.3 Sharing files with Windows systems by using the NetServer -- 6.3.1 Plan the configuration -- 6.3.2 Create the group profiles -- 6.3.3 Secure the directory -- 6.3.4 Configure the NetServer -- 6.3.5 Share the directory.

6.3.6 Start the iSeries NetServer -- 6.3.7 Configure the clients to access the shared directory -- 6.3.8 Test the configuration -- 6.3.9 Reviews and conclusions -- 6.4 Transferring files using secure FTP -- 6.4.1 Plan the configuration of the local Certificate Authority -- 6.4.2 Plan the configuration of the server certificate -- 6.4.3 Create the local Certificate Authority on NewYork.ABCCo.com -- 6.4.4 Create the *SYSTEM certificate store and server certificate -- 6.4.5 Configure the FTP server to listen for secure connections -- 6.4.6 Export the Certificate Authority certificate to IFS -- 6.4.7 Create a *SYSTEM certificate store on the Houston iSeries -- 6.4.8 Import the CA certificate into the Houston.ABCCo.com certificate store -- 6.4.9 Configure the FTP client to trust the Certificate Authority -- 6.4.10 Test the configuration -- 6.5 Configuring client authentication for the FTP server -- 6.5.1 Configure the FTP server to require client certificates -- 6.5.2 Defining the FTP server's Certificate Authority trust list -- 6.5.3 Issuing user certificates -- Chapter 7. Securing Telnet sessions -- 7.1 iSeries Telnet server support with client authentication -- Chapter 8. Connecting your iSeries to the Internet: Scenarios -- 8.1 Connecting to Internet from behind a firewall: HTTP Server -- 8.1.1 Planning worksheet for connecting to the Internet -- 8.1.2 Configure iSeries server AS24 via Internet Connection Wizard -- 8.1.3 Implement security setting on iSeries server AS24 -- 8.1.4 Test the configuration -- 8.1.5 Review, conclusions, and references -- 8.2 Connecting to the Internet from DMZ: Host to host VPN -- 8.2.1 Planning worksheet for configuring a host to host VPN connection -- 8.2.2 Configure iSeries server AS24 for the initiating VPN connection -- 8.2.3 Configure iSeries server AS25 for the receiving VPN connection.

8.2.4 Implement IP Packet filter rules for iSeries server AS25 -- 8.2.5 Test the configuration -- 8.3 Connecting to the Internet from DMZ: Host to gateway VPN -- 8.3.1 Planning worksheet for configuring a host to gateway VPN connection -- 8.3.2 Configure iSeries server AS24 for the gateway VPN connection -- 8.3.3 Configure iSeries server AS25 for the host VPN connection -- 8.3.4 Test the configuration -- Chapter 9. Using iSeries mail services -- 9.1 Creating a simple mail infrastructure -- 9.2 Extending the mail infrastructure to multiple domains -- 9.3 Using a mail relay to access the Internet -- 9.4 Monitoring QSYSOPR message queue and sending e-mail -- Chapter 10. Time synchronization scenario -- 10.1 Synchronize iSeries system clock using Management Central -- 10.2 Synchronize a single iSeries system clock -- 10.3 More information -- Chapter 11. Internet printing scenarios -- 11.1 Internet printing protocol (IPP) -- 11.1.1 IPP clients, servers and printers -- 11.1.2 IPP on the iSeries -- 11.1.3 Security -- 11.2 Configuring IPP -- 11.2.1 Configure the iSeries IPP server -- 11.2.2 Start the IPP server -- 11.2.3 Configure the Windows 2000 based client to use this IPP printer. -- 11.2.4 Test the configuration -- 11.3 Configuring the IPP client on the iSeries -- 11.3.1 Configure the iSeries IPP client -- 11.3.2 Test the configuration -- 11.4 Securing the IPP server -- 11.4.1 Configure the iSeries IPP server to use SSL -- 11.4.2 Create a Certificate Authority, *SYSTEM store, and a server certificate -- 11.4.3 Configure the client for secure connections -- 11.4.4 Test the configuration -- Appendix A. Additional material -- Locating the Web material -- Using the Web material -- How to use the Web material -- Related publications -- IBM Redbooks -- Other publications -- Online resources -- How to get IBM Redbooks -- Help from IBM -- Index -- Back cover.