RE: Is Virus protection software safe on an NT / Oracle

!! Please do not post Off Topic to this List !!

Rodd Holman wrote:

With the advent of worms like Code Red, I would recommend it. You don't need users on the server anymore to get a virus. All you need is an OS full of holes and the system open to the internet.

Rodd Holman

Hi.

I've found a very effective method for not needing virus protection for an Oracle/NT Server:

1. remove all shares
2. install remote control software
3. remove the monitor
4. only give people in the ORA_DBA group the remote control password.

I do not know of any virus that travels over sql*net/Net8. Apply the current patch sets (NOT the post SP6a roll-up), put a password on the listeners.
If IIS tools are not installed, if a mail client is not installed, if browsers are not used, if console access is not disabled - virus protection software is not needed.
Dedicate the box to Oracle only.
Create bogus tablespaces to exhaust the free space, then drop them, leaving the dead datafiles behind to be re-used later.

Paul

btw - beware - NT4 post-SP6a roll-up completely hosed my workstation. (I'm assuming that you've already disabled unneccesary services)

>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 9/14/01, 12:50:32 PM, "Boivin," Patrice J <BoivinP_at_mar.dfo-mpo.gc.ca> wrote regarding RE: Is Virus protection software safe on an NT / Oracle server?:

> !! Please do not post Off Topic to this List !!

> It will slow down your server.

> With McAfee, you can exclude the directories that contain oracle

datafiles,

> that minimizes the impact.

> Virus checking software is a good idea, in my opinion.

> Regards,
> Patrice Boivin
> Systems Analyst (Oracle Certified DBA)

> Acting Head
> Systems Admin & Operations | Admin. et Exploit. des systèmes
> Technology Services | Services technologiques
> Informatics Branch | Direction de l'informatique
> Maritimes Region, DFO | Région des Maritimes, MPO

> E-Mail: boivinp_at_mar.dfo-mpo.gc.ca <mailto:boivinp_at_mar.dfo-mpo.gc.ca>

> -----Original Message-----
> From: Smith, Ron L. [SMTP:rlsmith_at_kmg.com]
> Sent: Friday, September 14, 2001 1:41 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Is Virus protection software safe on an NT / Oracle
> server?

> !! Please do not post Off Topic to this List !!

> Our NT Server admins have been told by the Security department that
> they
> need to install virus protection software on the NT / Oracle
> servers. Does
> anyone know of any problems between Oracle and any virus software?

> Ron Smith
> Database Administrator
> rlsmith_at_kmg.com

> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Smith, Ron L.
> INET: rlsmith_at_kmg.com

> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing
> Lists
>

> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like

subscribing).

> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Boivin, Patrice J
> INET: BoivinP_at_mar.dfo-mpo.gc.ca

> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

• Please see the official ORACLE-L FAQ: http://www.orafaq.com
• Author: Rodd Holman INET: rodney.holman_at_lodgenet.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Paul Drake
  INET: drake_at_psscorp.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).