Skip, Thank-you for that! Our firewall/proxy guys are quite motivated to take away our firewall access, so they are working pretty quickly to get us the similar functionality through the proxy. This is way better than trying to use that IBM PDUU utility....
_________________________________________________________________ Dave Jousma Manager Mainframe Engineering, Assistant Vice President [email protected] 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Jesse 1 Robinson Sent: Tuesday, October 24, 2017 3:25 PM To: [email protected] Subject: Re: FTP to IBM through a local proxy **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Here's how we run through a proxy. This is *not* encrypted because our proxy appliance does not understand TLS. If yours does, you can substitute those commands for the vanilla FTP commands below. Note that our proxy gets the target URL from the second line. //FTPSTEP EXEC PGM=FTP,COND=(0,LT),REGION=20M //SYSPRINT DD SYSOUT=*,BLKSIZE=133 //OUTPUT DD SYSOUT=*,BLKSIZE=133 //INPUT DD * proxy-name (timeout 720 exit=12 [email protected] <-- target URL sending-userid@home-url cd mvs/toibm SENDSITE binary put 'source-file-name.TRS' + target-file-name quit . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Jousma, David Sent: Tuesday, October 24, 2017 11:42 AM To: [email protected] Subject: (External):FTP to IBM through a local proxy All, We used to be able to FTP TLS/SSL encrypted data (dumps, etc) to IBM by opening the firewall at our end to certain IBM IP addresses/ports(21) like testcase.boulder.ibm.com, etc. Somewhere along the line, I believe IBM changed their servers to redirect the data connection off port 21 onto a range in the 65024-65535 which now fails miserably, and the PTB here won't entertain opening up a range of ports like that. I've managed to get our SMPE RECEIVE ORDER fixed by converting to HTTPS and coding our proxy server. You may recall my ailings on this topic a week or so ago....Thanks to Kurt Q for the assist. Now, the problem is sending IBM diagnostic data. Again, I was able to do that direct from one of my tech lpars to testcase.ibm.com after opening firewall for outbound connections. That also quit working, for the same reasons. I'm playing around with the IBM PDUU (AMAPDUPL) utility, which has support for passing data through proxy server, but in general it seems pretty kludgy. Is anyone aware of a way to use straight FTP, and provide the necessary client options, or ftp subcommands to pass the data through a proxy server? I'd love to see something that one of you might have. I'll send a virtual cold beverage to whomever can show me some samples... Thanks in advance, Dave ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
