| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re: Firewall -- ORA-12535: TNS:operation timed out
also check the value of CONNECT_TIMEOUT_<lsnr>,
its default value is 10 (secs).
Oh boy!
You need to fix that firewall. You should
a) allow your local nodes to go out on Oracle*Net port (and I advise against
1521, 1526 and 1527).
b) allow certain IP addresses to go in your LAN by using Oracle*Net port.
Second thing to do would be to have a SSL firewall and use Advanced
Networking
or, alternatively, configure Oracle*Net to tunnel through firewalls by using
ssh. The latter is described on in the following article by R. Schrag:
http://www.dbspecialists.com/presentations/net8_security.html
There are tons of options for you and I could easily write an article about
Oracle*Net and firewalls (Thermopilae in Greek). The best thing to do is to
read a few articles about firewalls and Oracle*Net until you find something
that fits your needs. It's half past midnight and I'm tired. May gods be
with
you. There was a guy named Leonidas who was the original security
administrator at the original firewall. Be brave, your work is much easier
then his was.
On 2003.07.10 00:44, Bob Robert wrote:
> Could someone share with me if you come across similar
> kind of configuration.
> --- Mladen Gogala <[EMAIL PROTECTED]> wrote:
> > You obviously do need special configuration.
> > You are welcome.
> >
> > On 2003.07.08 17:09, Bob Robert wrote:
> > > All,
> > >
> > > I am getting following error message when I try to
> > > connect though firewall (from DMZ to Network).
> > >
> > > ORA-12535: TNS:operation timed out
> > >
> > > Do I need to do special configuration (like cman)
> > > around firewall?
> > >
> > > Thanks In Advance,
> > > Bob
> > >
> > >
> > >
> > > __________________________________
> > > Do you Yahoo!?
> > > SBC Yahoo! DSL - Now only $29.95 per month!
> > > http://sbc.yahoo.com
> > > --
> > > Please see the official ORACLE-L FAQ:
> > http://www.orafaq.net
> > > --
> > > Author: Bob Robert
> > > INET: [EMAIL PROTECTED]
> > >
> > > Fat City Network Services -- 858-538-5051
> > http://www.fatcity.com
> > > San Diego, California -- Mailing list and
> > web hosting services
> > >
> >
> ---------------------------------------------------------------------
> > > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > > to: [EMAIL PROTECTED] (note EXACT spelling of
> > 'ListGuru') and in
> > > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > > (or the name of mailing list you want to be
> > removed from). You may
> > > also send the HELP command for other information
> > (like subscribing).
> > >
> >
> > --
> > Mladen Gogala
> > Oracle DBA
> > --
> > Please see the official ORACLE-L FAQ:
> > http://www.orafaq.net
> > --
> > Author: Mladen Gogala
> > INET: [EMAIL PROTECTED]
> >
> > Fat City Network Services -- 858-538-5051
> > http://www.fatcity.com
> > San Diego, California -- Mailing list and web
> > hosting services
> >
> ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of
> > 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > (or the name of mailing list you want to be removed
> > from). You may
> > also send the HELP command for other information
> > (like subscribing).
> >> Do you Yahoo!?
> __________________________________
>> To REMOVE yourself from this mailing list, send an E-Mail message
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
-- Mladen Gogala Oracle DBA -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mladen Gogala INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Manoj Kumar Jha INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Thu Jul 10 2003 - 03:26:05 CDT
 |
 |