| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
| WebSphere MQ V7.1 Announced |
« View previous topic :: View next topic » |
| Author |
Message
|
| zpat |
 Posted: Fri Nov 18, 2011 12:53 pm Post subject: |
 |
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
Exactly. This is the internal world, not the external world. We trust our DNS server for many purposes.
I, sort of, understand the firewall rule mentality of Jeff's viewpoint - but this is not a boundary layer between two networks. It's about saying - OK this application from this IP (name) gets to use this userid as a MQ client.
I'm using DNS names in BlockIP2 anyway - would prefer to convert to a standard feature if it offers the same options. |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Sat Nov 19, 2011 7:13 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Any good MQ admin knows that you always need to take steps to protect the production environment against well meaning developers.
Otherwise, I'm not saying that there's any meaningful reason why you can't currently use DNS names. It's entirely possible that the only reason you can't right now is that the development team ran out of time.
So, among other things, open a PMR and as well file a requirement. |
|
| Back to top |
|
|
| HubertKleinmanns |
| Posted: Sun Nov 20, 2011 11:15 pm Post subject: |
|
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| zpat wrote: |
Exactly. This is the internal world, not the external world. We trust our DNS server for many purposes.
I, sort of, understand the firewall rule mentality of Jeff's viewpoint - but this is not a boundary layer between two networks. It's about saying - OK this application from this IP (name) gets to use this userid as a MQ client.
I'm using DNS names in BlockIP2 anyway - would prefer to convert to a standard feature if it offers the same options. |
BlockIP2 is much more powerful than the new security features. I agree, that IP addresses as well as DNS names as well as generic addresses should be accepted by the new attributes. It is then up to the administrator, which mechanism she/he will use  .
I feel, that the new features somehow rebuild the BlockIP2 features and I hope, future releases will implement more and more of the BlockIP2 mechanisms  .
IBM is on the right path  .
_________________
Regards
Hubert |
|
| Back to top |
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
