MKS Implementer 2006 Administration Guide

Setting Up for TCP/IP Distribution
MKS recommends you use Implementer’s default TCP/IP port, 30005, on both the host
and remote systems; although this is not a requirement.
MKS recommends you set all OS/400 TCP/IP attributes to the IBM recommended
defaults.
Firewall Considerations
For TCP/IP to work successfully with Implementer, certain external conditions must be met.
The following information on using TCP/IP with a firewall may be helpful to your Network
Administrator, or any other person responsible for the setup and maintenance of your
communications and network.
When using Implementer on a system with a firewall, the firewall must be completely
transparent to Implementer. Thus, when targeting external iSeries systems with remote
promotions, configure the network firewall to allow traffic through a predefined, userconfigured
TCP/IP port on the remote system. Specify the port in Implementer’s Network
Configuration. Uncompromising to your security, Implementer ensures that the program
monitoring the port only responds to Implementer-specific requests. If needed, you can
restrict activity on the port to specific Internet addresses by establishing firewall rules.
To avoid the possibility of remote system tampering, Implementer accepts only certain
requests through TCP/IP. The request information is handled using a token passed from the
host system. The remote system interprets the token to identify which remote function to
invoke. Any requests that present an invalid token are ignored.
For outbound communications of bulk files transfers, Implementer uses standard FTP
services that process with the default user profile MWIPROD. This requires the standard FTP
ports 20 and 21 enabled. In addition, for proper authorization and authority to perform the
FTP operation, the MWIPROD user profile must have the Limit Capabilities parameter set to
*NO, as well as have authority to use the following commands on the remote system:
CLRSAVF (Clear Save File)
CRTSAVF (Create Save File)
CRTLIB (Create Library)
DLTLIB (Delete Library)
IMPORTANT Due to the variety of FTP proxy servers and their protocols, the use of
proxy servers is not supported.
OS/400 FTP Service
You must start the standard OS/400 FTP service to use bulk file transfers.
175