| Author |
Message
|
| ae06425 |
 Posted: Mon Aug 16, 2010 12:45 pm Post subject: restricting svrconn channel connections from IP |
 |
|
Centurion
Joined: 02 Apr 2007
Posts: 100
|
I wanna restrict number of channel connections from certain IP to certain SVRCONN channel.
Can this be done with MQ 6.0.2.4 on solaris 10?
In my case, there is one IP/hostname making too many connections to SVRCONN channel, using up almost all channel connections under queue manager.
Any help is greatly appreciated
thanks |
|
| Back to top |
|
 |
| exerk |
| Posted: Mon Aug 16, 2010 1:17 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
I'm not sure whether it can be done with BlockIP2...anyone out there confirm/deny?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Mon Aug 16, 2010 1:50 pm Post subject: Re: restricting svrconn channel connections from IP |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| ae06425 wrote: |
I wanna restrict number of channel connections from certain IP to certain SVRCONN channel.
Can this be done with MQ 6.0.2.4 on solaris 10? |
Have a look at either
- MQ Authenticate User Security Exit (MQAUSX)
- MQ Standard Security Exit (MQSSX)
Both MQAUSX and MQSSX have the feature you are looking for plus they also add security to your queue manager.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| ae06425 |
| Posted: Tue Aug 17, 2010 5:56 am Post subject: |
|
|
Centurion
Joined: 02 Apr 2007
Posts: 100
|
Looks like MQAUSX and MQSSX are commercial.
Any other way around? any internal tool or support packs etc...?
thx |
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Aug 17, 2010 6:03 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
There are out-of-the-box parameters for this kind of thing in MQ v7, MAXINSTC is the primary.
So if you want a free solution, then upgrade.
Or go back and revisit the documentation on BlockIP2 and see if it does what you need. |
|
| Back to top |
|
|
| mqjava |
| Posted: Tue Aug 17, 2010 7:24 am Post subject: |
|
|
Voyager
Joined: 25 May 2009
Posts: 80
Location: New Jersey
|
| check MAXCHL in BlockIP2 manual. |
|
| Back to top |
|
|
|
|
