From: "Vladimir M. Zakharychev" <bob@dpsp-yes.com>
Newsgroups: comp.databases.oracle.server
Subject: Re: gui tool for oracle.. what is client when installation?
Date: Mon, 9 Sep 2002 15:17:48 +0400
Organization: N-Networks
Lines: 31
Message-ID: <ali01e$s4t$1@babylon.agtel.net>
References: <alhjof$udm$1@newsreader.mailgate.org> <alhkcr$v0f$1@newsreader.mailgate.org>
NNTP-Posting-Host: 212.233.81.44
Mime-Version: 1.0
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Trace: babylon.agtel.net 1031570286 28829 212.233.81.44 (9 Sep 2002 11:18:06 GMT)
X-Complaints-To: usenet@babylon.agtel.net
NNTP-Posting-Date: 9 Sep 2002 11:18:06 GMT
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


I would recommend them coming through ssh anyway, for security
reasons. If they need a GUI tool, they can setup port forwarding/tunneling
through ssh for X, so that they keep communicating with your box securely.
Of course, you will need to block Oracle ports (1521 and 1526 usually)
to prevent unauthorized parties from accessing your Oracle server, otherwise
tunneling through ssh is of no use. You can do this in several ways - block
ports on your firewall, put a tcp wrapper around Oracle listener or use 
listener's own filtering by adding

tcp.validnode_checking=yes
tcp.invited_nodes=(list of IPs that are allowed to connect, comma-separated)

into your sqlnet.ora or protocol.ora file in $ORACLE_HOME/network/admin
and restarting listener.

-- 
Vladimir Zakharychev (bob@dpsp-yes.com)                http://www.dpsp-yes.com
Dynamic PSP(tm) - the first true RAD toolkit for Oracle-based internet applications.
All opinions are mine and do not necessarily go in line with those of my employer.


"eugene kim" <eugene1977@hotmail.com> wrote in message news:alhkcr$v0f$1@newsreader.mailgate.org...
> forgot to ask one question,
> right now, my friends are using ssh to connect to my comp and sqlplus to 
> connect to db.
> 
> if i have set up tora(or 'oracle client'?)
> they wouldn't need ssh? ( just to see tables)
> and directly connect to my db?
> thank you


