Introduction
SECTCP (Secured TCP) is a System i free utility
that may be used to control and restrain access to the following TCP servers:
FTP
TELNET
SECTCP adds an extra protection layer between a firewall (if you have one) and the OS/400 security.
This extra layer is much more flexible than any firewall and can be easily controlled and changed as needed.
Changes to SECTCP settings do not require restarting the FTP or the TELNET server.
Prerequisites
Operating system release V5R2 or subsequent
ILE-RPG compiler
About WSECTCP
If you are currently running SECTCP and you are willing to host a CGI application on an HTTP instance,
then you may install a WEB interface for SECTCP.
Its name is WSECTCP.
This WEB interface makes SECTCP so easy that you would never go back to a 5250 session.
Go to the download page and install WSECTCP today.
Installation procedure
Signon to the System i with a class *SECOFR user profile
STRREXPRC SRCMBR(INSTALL) SRCFILE(SECTCP/QREXSRC)
It will perform the following:
creates a compile program in library SECTCP
runs command SECTCP/COMPILE that creates the necessary modules and programs
runs command SECTCP/INSTALL to complete the installation by
restoring directory /sectcp
creating and populating library SECTCPDATA with local files
During the installation process will stop two times:
The first time, to ask the name of the user profile (SECTCP owner) authorized to change the SECTCP settings
The second time, to display the HTTP directives that you may install later on in an
Apache HTTP instance of your choice.
These directives allow to display the SECTCP documentation
(the one you are currently reading. They are in the IFS stream file
/sectcp/apache/httpdirectives.txt.
If you like, you may press this
to display them.
Setting up SECTCP
To define the SECTCP settings, you must
signon with the user profile authorized for this operation during the installation process
enter command SECTCP/SECTCP .
You will then receive the following screen:
Figure 1 - No protections yet
(Please note that help text is available from any SECTCP screen)