Re: Oracle 10G XE WindowsXP and Zonealarm Pro

From: Gerard H. Pille <ghp_at_skynet.be>
Date: Tue, 09 Jan 2007 19:11:39 +0100
Message-ID: <45a3d9b0$0$15372$ba620e4c_at_news.skynet.be>


Robert A. Reissaus wrote:

> On Mon, 08 Jan 2007 20:34:53 +0100, "Gerard H. Pille" <ghp_at_skynet.be>
> wrote:
> 
> 

>>Robert A. Reissaus wrote:
>>
>>>Hi guys.
>>>I have installed a oracle10 Express Edition on my Windowsxp. On the
>>>system I am running ZoneAlarm Pro with rather obvious adjusted privacy
>>>settings as follows:
>>>3rd party cookies are blocked.
>>>private header information is disabled.
>>>popup/under ads are blocked
>>>animations are blocked
>>>script execution is blocked ( vbscript etc).
>>>
>>>As a result I can NOT logon to the database using SYSTEM ( or any
>>>other user for that matter).
>>>
>>>The ONLY i can log in is to remove ANY initial blockage in my
>>>firewall. This is of course totally unacceptable. Now I have tried to
>>>tweak the firewall settings in such a way that ports used by oracle
>>>are allowed, but that doesn't work. It *looks* like oracle circumvents
>>>the firewall entirely.
>>>
>>>Anybody any idea?
>>>Robert A. Reissaus
>>
>>You are trying to connect to Oracle from outside the firewall?
>>
>>You could try to tell Zonealarm that the oracle executables can contact the outside world, and
>>open a port through which you can reach the listener from the outside.
>>
>>I have only experience with zonealarm free on Whinedoze, but that one used to tell me which
>>programs were trying to contact the outside world, and what was trying to connect. So it was
>>easy: allow or disallow, and remember the answer, in this way you set up your firewall "a fur et
>>a mesure".
> 
> 
> Hi gerald.
> No, Zone Alarm and Oracle are running on the same system. So Oracle is
> using the loopback 127.0.0.1 which is in the trusted zone. That's what
> makes this so strange. If the ONLY way I can logon using the database
> home page is by setting the standard ZoneAlarm settings to  allowing
> all cookies, popups/unders, advertisement, animations,web bugs,
> private headers otherwise Oracle isn't accessible. In fact Oracle says
> 'We don't care about anything else, as long as we van run! Even if
> that means you have to ( almost effectively) remove all security.
> 
> Robert
> 

Surely, Zonealarm "PRO" should be able to tell you all he is blocking in a kind of log? Received on Tue Jan 09 2007 - 19:11:39 CET

Original text of this message