To see all my blog posts on IP filtering see here.
If you are using Communications Server IP filtering to allow/deny IP traffic to destinations, you need the TRMD daemon running. With IP filtering you can log when access is allowed/denied.
The TRMD is needed to write the log events.
TRMD started task JCL
//TRMD PROC OPT='-P TCPIP -d 1'
//*
//* IBM Communications Server for z/OS
//* SMP/E distribution name: EZATRMDP
//TRMD EXEC PGM=EZATRMD,REGION=4096K,TIME=NOLIMIT,
// PARM=('ENVAR("_CEE_ENVFILE_S=DD:STDENV")/&OPT')
//STDENV DD *
RESOLVER_CONFIG=//'ADCD.Z24C.TCPPARMS(TCPDATA)'
export TZ=GMT0
/*
//SYSPRINT DD SYSOUT=*,DCB=(RECFM=F,LRECL=80,BLKSIZE=80)
//SYSIN DD DUMMY
//SYSERR DD SYSOUT=*
//SYSOUT DD SYSOUT=*,DCB=(RECFM=F,LRECL=80,BLKSIZE=80)
//CEEDUMP DD SYSOUT=*,DCB=(RECFM=FB,LRECL=132,BLKSIZE=132)
I do not know what authority it needs to run. It runs as userid START1 on my ADCD system.
When you start it, it starts up a job with name TMDR1, and the “started task” TMDR ends.
You stop it using P TMDR1.
Logging
The syslogd daemon needs to be running.
In my /etc/syslog.conf file I have
*.TRMD1.*.info /var/log/TRMD1I.%Y.%m.%d *.TRMD1.*.debug /var/log/TRMD1D.%Y.%m.%d
Both of these write the access/denied messages – you would typically just have one of these.
One thought on “CS IP filtering: configuring TMDR – Traffic Management Daemon Regulation”