Tectia

JCL-Specific Transparent FTP Tunneling or FTP-SFTP Conversion

In this example, transparent FTP tunneling or FTP-SFTP conversion is configured per FTP JCL job using a SYSFTPD DD statement.

Do the following steps:

  1. Copy the /opt/tectia/etc/ssh-socks-proxy-config-example.xml configuration file to /opt/tectia/etc/ssh-socks-proxy-config.xml.

  2. (FTP-SFTP conversion only) If you want to use FTP-SFTP conversion, edit the configuration file and change the value of the action attribute to "ftp-proxy":

      <filter-engine>
         <rule ip-address=".*"
                 ports="21"
                 action="ftp-proxy"
                 profile-id="id1"
                 username-from-app="YES"
                 hostname-from-app="YES"
                 fallback-to-plain="NO" />
      </filter-engine>
    
  3. Start the SOCKS Proxy if it is not already running.

  4. Create a new FTP configuration file EXAMPLE.SSHFTP.FTPDATA with the following contents:

    SOCKSCONFIGFILE  EXAMPLE.JCL.SOCKS.CONF
    FWFRIENDLY       TRUE
    
  5. Create a new socks configuration dataset EXAMPLE.JCL.SOCKS.CONF with the following contents:

    sockd @=127.0.0.1 0.0.0.0 0.0.0.0
    
  6. Modify your existing FTP JCL to use SOCKS by adding a SYSFTPD DD statement, for example:

    //FTP       EXEC PGM=FTP,PARM='company.example.com
    (EXIT=8'
    //SYSPRINT  DD  SYSOUT=*
    //SYSFTPD   DD  DSN=EXAMPLE.SSHFTP.FTPDATA,DISP=SHR
    //SYSIN     DD  *
    userid   passwd
    ascii
    get test.file 'USERID.FTP.TEST'
    quit
    /*