Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Firewalling Oracle

Re: Firewalling Oracle

From: Jared Still <jkstill_at_gmail.com>
Date: 2006-01-12 00:01:55
Message-id: bf46380601111501v17578f8dheb8e99a93d109698@mail.gmail.com


Thanks for the replies.

Our boxes are all behind a firewall.

I got dinged for not using TCP checking in the listener.

Seems overkill to me.

One private reply had a good point - prevent QA boxes from talking to production boxes, etc.

Jared

On 1/11/06, Peter Sylvester wrote:
>
> Its been a while since I've played with this, but it seemed to me that
> there where issuses if you put hosnames in the TCP.INVITED_NODES that
> where running Dynamic IPs. The DNS lookup in the listener evidently is
> evidently done once, and it does not see the new IP unless you bounce
> the listener.
>
> Its not an issue with app servers and the like (running fixed IPs), but
> for people who wanted some admin type of access from their desktops it
> was.
>
> --Peter
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Received on Thu Jan 12 2006 - 00:01:55 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US