Re: Connecting Oracle DB through firewall

From: Sybrand Bakker <postbus_at_sybrandb.demon.nl>
Date: Thu, 28 Mar 2002 18:37:00 +0100
Message-ID: <l2l6ausfdomcavlv6jp1477eoqutib2d1t@4ax.com>

On 28 Mar 2002 08:36:02 -0800, nebojsa.petrovic_at_avanturo.de (Neba) wrote:

>Hello,
>
>I have installed OracleDB 8.1.7 on Windows2000 SP2 This machine is in
>our LAN.
>Oracle DB use listener for communication on port 1521.
>
>Client is in DMZ of frewall. Firewall is Nokia IP330 with Check Point
>Fw-1 4 software.
>
>If I try connect to Oracle DB from LAN everything working fine. But
>when I try connect to Oracle Db from DMZ I got some problems.
>
>If I open all ports on firewall for connection between DMZ and LAN, I
>can connect to Oracle DB (tnsping is OK and I can connect with other
>aplication e.g. with SQL+) and everything working fine!
>
>If I leave open only port 1521 on firewall, then I can reach OracleDb
>by tnsping, but when I try use SQL+ I got time out error.
>
>I looked in tnslistener.log file, and I saw that client for any
>connection chose new port number (on client side)!So if I open port
>1521 it is OK for server side but is wrong for client side!
>
>How can I solve this problem?
>Is it possibly 'fix' port number on client side?
>
>Thanks!
>
>
>Nebojsa Petrovic

You can solve this by

- using Oracle connection manager
- setting up MTS for your instance
- patching your software to at least 8.1.7.1.2 and set

use_shared_sockets in the registry.

All solutions above will use only one port. Default net8 will always use port redirection

Hth

Sybrand Bakker, Senior Oracle DBA

To reply remove -verwijderdit from my e-mail address Received on Thu Mar 28 2002 - 11:37:00 CST