| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
Home -> Community -> Usenet -> c.d.o.server -> Re: protocol.ora security question
Didier wrote:
>Hi,
>I'm running w2ksp4 & oracle Release 9.2.0.1.
>The oracle server has the following ip address: 10.0.0.10
>
>I've created: oracle\ora92\network\admin\protocol.ora.
>The file only contains the following lines:
>
>tcp.validnode_checking = YES
>tcp.invited_nodes = (10.0.0.10)
>
>I've restarted "every" oracle services (even a few times). I can still
>use "oracle sql*plus" from any workstation on our network (for example
>10.0.0.50, 10.0.0.8 etc.) to connect to our test database!
>1) Why does that still work?
>I thought putting "tcp.validnode_checking=YES" would disallow every
>host that is not exlictly listed in "tcp-invited_nodes".
>
>2) Can you put a network range in the file like:
>tcp.invited_nodes=(10.0.0.0/24)?
>
>Thanks a lot
>Didier
>
>
In addition to Sybrand's advice ... with 9i the protocol.ora entries can
be placed into sqlnet.ora
so the use of Connection Manager is not required.
-- Daniel Morgan http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp damorgan_at_x.washington.edu (replace 'x' with a 'u' to reply)Received on Mon Oct 20 2003 - 12:59:58 CDT
![]() |
![]() |