Re: Remote acces problem

Your problem lies in the firewall. That allows traffic on port 1521 only, right?

But standard the initial port 1521 is only for initiating the session traffic. As soon a connection is granted (user, password, instance, SID, db_name, db_domain and whatever....), the listener creates a shadow process and redirects the client to this process on any random port in the range above 1024 but below 65535. And there your firewall is blocking. Client probably get ora-03114 or silence.

To overcome this port switching set environment parameter USE_SHARED_SOCKETS = TRUE (se Metalink, search the word) Don't trust the entries in the listener.log in this case; they tell you that the connection is spawned on 2628 or the like. But in real world the connection to the thread (shadow process) is made on port 1521, and the firewall is not blocking anymore.

regards
/Svend Jensen

Radim Friedel wrote:
> Hello
>
> NT 4 server,Oracle 8
>
> 1 physical NIC and 2 IP on it
>
> internet->firewall->public ip//NT 4\\local ip<-local user
>
> Local users can use oracle DB without any problem
> Remote user do see the listener, but they canŧt connect to the DB.
>
> I donīt know how to configure listener.
>
> Should I specify both IPs in listener.ora like this?
>
> LISTENER =
> (DESCRIPTION_LIST =
> (DESCRIPTION =
> (ADDRESS_LIST =
> (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.1)(PORT = 1521))
> (ADDRESS = (PROTOCOL = TCP)(HOST = 212.80.76.3)(PORT = 1521))
> (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
> )
> )
> )
>
> Could be both IPīs on the same port?
>
> How to modify the tnsnames.ora? I do use two SIDīs.
>
> TEST =
> (DESCRIPTION =
> (ADDRESS_LIST =
> (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.1)(PORT = 1521))
> )
> (CONNECT_DATA =
> (SERVICE_NAME = TEST)
> )
> )
>
> TEST2 =
> (DESCRIPTION =
> (ADDRESS_LIST =
> (ADDRESS = (PROTOCOL = TCP)(HOST = 212.80.76.3)(PORT = 1521))
> )
> (CONNECT_DATA =
> (SERVICE_NAME = TEST)
> )
> )
>
> Iīm new to the oracle.
> Somwhere I saw info that I need to use Connection manager which I donīt have
> configured yet.
>
> Thank you forward for any information about this problem.
>
> Best regards
>
> Radim
>
>
Received on Mon Feb 17 2003 - 13:01:15 CST