Firewalls and Internet pass-thru

You would normally use a firewall to prevent access from hostile IP addresses, for example in a Denial of Service attack. However, you might need to temporarily block IP addresses within IBM MQ, perhaps while you wait for a security administrator to update the firewall rules.

To block one or more IP addresses, create a channel authentication record of type BLOCKADDR or ADDRESSMAP. For more information, see Blocking specific IP addresses.

• Security for IBM MQ Internet Pass-Thru
  IBM MQ Internet Pass-Thru can simplify communication through a firewall, but this has security implications.

Parent topic: Plan for the security requirements