Re: Oracle 8.1.7 on Redhat 7.1: how to listen on specific address ?

From: Giorgos Tsiamitas <gtsiam_at_gmx.net>
Date: Sun, 03 Jun 2001 13:24:33 GMT
Message-ID: <lUqS6.32$sR6.3423@nreader1.kpnqwest.net>

The HOST parameter in LISTENER.ORA does not specify what clients to listen to, but what servers to register with the listener. This means that when you specify HOST=localhost you actually tell to the listener to serve a database hosted in localhost.

To restrict client connections to the listener, do the following:

Create a PROTOCOL.ORA file in $ORACLE_HOME/network/admin and include these lines:

tcp.validnode_checking=yes
tcp.invited_nodes=(127.0.0.1, xx.xx.xx.xx)

Replace xx.xx.xx.xx with as many client IPs you want to allow access to.

Restart the listener.

Clients not specified in tcp.invited_nodes list will get "ORA-12537: TNS:connection closed" on connection attempts.

---
Giorgos


"Gunther Hermann" <ghermann_at_dclient103-30.hispeed.ch> wrote in message
news:m3itie78n1.fsf_at_dclient103-30.hispeed.ch...


>

> Hi

>

> I just downloaded and installed Oracle 8.1.7 on Redhat 7.1.

> Things worked fine so far, I got the database up and running.

>

> What I'd finally like to to is to bind all listening services

> to localhost addresses only.

>

> Trying this, two questions/problems came up when calling netstat -l

> with output

>  tcp        0      0 *:32771      *:*             LISTEN

>  tcp        0      0 *:32772      *:*             LISTEN

>  tcp        0      0 *:1521       *:*             LISTEN

> and lsof with output

>  oracle      783   oracle    9u  IPv4       1525   TCP *:32771 (LISTEN)

>  oracle      785   oracle    9u  IPv4       1530   TCP *:32772 (LISTEN)

>

> (i)  what exactly are the services running on ports 32771/32772 and how

 can


>      I configure them to listen on 127.0.0.1 only ?

> (ii) why does the tns listener (port 1521 if I'm not wrong) listen on

 _all_


>      addresses although my 'listener.ora' looks like

>      LISTENER =

>      (DESCRIPTION_LIST =

>       (DESCRIPTION =

>        (ADDRESS_LIST =

>         (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))

>        )

>        (ADDRESS_LIST =

>         (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))

>        )

>       )

>      )

>      ??

>

> Thanks a lot

> Gunther

Received on Sun Jun 03 2001 - 08:24:33 CDT