Clever Geek Handbook

Port 443 on iSeries v5r4 is "filtered for Internet clients even if it is allowed in the firewall rules. How can I make this" open "?

The port was filtered by the ISP.

The problem is that HTTPS port 443 is not accessible from the internet, but it is open on our local network. Our iSeries v5r4 connects to inet via L2TP with IPSec. If packet filters are not active, nmap shows that ports 25, 80, 110, and even 10322 (the WAS admin console) are open on the IP address. 443 have a status of filtered.

If I activate the following packet rules:

# -----------------------------------------------
# Statements to permit inbound HTTP over STATICIP
# -----------------------------------------------
INCLUDE   FILE = /QIBM/UserData/OS400/TCPIP/PacketRules/Services.i3p
FILTER SET HTTP_INBOUND   ACTION = PERMIT   DIRECTION = OUTBOUND   SRCADDR = *   DSTADDR = *   SERVICE = HTTP_80_FS   JRN = OFF
FILTER SET HTTP_INBOUND   ACTION = PERMIT   DIRECTION = INBOUND   SRCADDR = *   DSTADDR = *   SERVICE = HTTP_80_FC   JRN = OFF
FILTER SET HTTP_INBOUND   ACTION = PERMIT   DIRECTION = OUTBOUND   SRCADDR = *   DSTADDR = *   SERVICE = HTTP_443_FS   JRN = OFF
FILTER SET HTTP_INBOUND   ACTION = PERMIT   DIRECTION = INBOUND   SRCADDR = *   DSTADDR = *   SERVICE = HTTP_443_FC   JRN = OFF
FILTER_INTERFACE   INTERFACE = STATICIP   SET = HTTP_INBOUND
# -----------------------------------------------

port 80 is "open", 443 is "filtered".

How can I make it "open"?

+1


source to share


5 answers


Some ISPs filter specific ports like RoadRunner used to filter my web server. It would be strange since 80 is not filtered, but it is a possibility.



+1


source


IBM online documentation on IP filtering and NAT that may help resolve the issue.



+1


source


You must configure your firewall to open and close TCP / IP ports.

Each firewall has a list of ports (or port ranges) open or closed to trafic. PLease consult your firewall / router documentation or contact your system administrator.

0


source


Port 443 is an SSL port, so it is possible that your firewall or your iSeries has an additional filter that must be configured to allow ssl traffic.

0


source


Thank you for your responses! The firewall is configured to open ports 80 and 443. But 443 is still filtered. Our ISP does not filter ports.

0


source






More articles:


All Articles