Re: SQL*Net through a Firewall

My office is deploying multiple servers throughout CONUS and 2 overseas and we have a lot of bases that use firewalls. We use port 1601 (just to be different) and we have found out that we need port 1602 open as well or SQL*Net traffic can not get through. We tried MTS on 7.2.3 and 7.3.2 and found out that the "hand-off" port, which used to be 1602, was now randomly assigned and all of our traffic failed. What we have been able to find out was in 7.3.3 or 7.3.4 (can't remember which right now) you can setup MTS to use specific ports only. I have some ORACLE white papers if you need more information.

Roy

Roy Jones
ICQ# 2096214
docjones_at_bellsouth.net
http://www.geocities.com/Heartland/Meadows/8858/

Kirmo Uusitalo <kirmo.uusitalo.NO.SPAM_at_iki.fi> wrote in article <34d9d4cf.31950953_at_192.1.1.13>...
> On Mon, 02 Feb 1998 15:02:46 +1000, Sys Admin
> <sysadmin_at_vdoj.vic.gov.au> wrote:
>
> >We have a requirement to replicate a database through a firewall. I am
> >assuming that if we can use DB_LINKS using SQL*Net through the firewall
> >then Replication will also work (?).
> >
> >However, when we tested a SQL*Net connection through a firewall our
> >comms guy said it spawned a lot of child processes which he was not
> >happy with (they seemed to be within a large range which he said would
> >be difficult to allow for).
> >
> >Has anyone done this successfully? The only documentation I have is an
> >Oracle Whitepaper dated 1995 and Oracle Support said this is the latest
> >one, which is surprising.
> >
> >Does anyone know of any decent up-to-date documentation on this? I
> >suspect it is quite a common request these days.
> >
> >Thanks in Advance,
> >
> >Andy Horne
>
> I am trying to get a connect through a proxy and SQL*Net 2 to two
> different Oracle databases.
>
> First one is 7.1 and I was able to get the connection working by doing
> a simple port replication (proxy machine port 21521 to 1521 on the
> machine Oracle is running).
>
> However, when I tried the same to Oracle 7.3.2., looks like the
> connection on port 1521 is closed shortly after the connect request,
> and I receive a message telling that the 7.3.2.OracleMachine can't be
> reached. Looks like that the 1521 connection is used to negotiate
> another port that isn't covered by the proxy.
>
> My question is what makes the two configurations different? is there a
> init.ora setting that could be used to make the 7.3.2 server use only
> 1521 port?
>
> I found an article with dejanews in which was hinted that setting
> server=dedicated in the tnsnames.ora for the database alias would
> solve the problem. Unfortunately I couldn't find any information on
> this in the Oracle documentation.
>
> Does any of you fellow Oracle users have more information on this
> issue ?
>
> Thanks for any help,
>
> Kirmo Uusitalo
> Kirmo.Uusitalo_at_iki.fi Key Technologies Oy
> System Analyst Uotinmaenkuja 9
> tel. +358-9-323451,+358-500-439125 00970 HELSINKI
> fax 324031 FINLAND
>
  Received on Thu Feb 19 1998 - 00:00:00 CST