Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: sqlplus wrong?

Re: sqlplus wrong?

From: Ed Stevens <nospam_at_noway.nohow>
Date: Tue, 12 Oct 2004 07:33:55 -0500
Message-ID: <m2jnm01gfugb683hpibs04tjp6euca83tc@4ax.com>


On Mon, 11 Oct 2004 16:28:18 GMT, Hans Forbrich <news.hans_at_telus.net> wrote:

>Ed Stevens wrote:
>
>>
>> I know you're trying to provide full information, but for the sake of
>> security, you should have masked your IP address. I was able to paste
>> your tnsnames entry into my tnsnames file and ...
>
>192.168.x.x are free to be used inside firewalls and should not be public.
>You could easily have hit any number of sites that use that numbering and
>have accidently exposed themselves to the big internet.
>
>Same for 10.x.x.x and 172.16.x.x-> 172.31.x.x
>
>http://www.stanford.edu/group/networking/lnaguide/docs/nat.html
>
>/Hans

I'll gladly confess to almost total ignorance about how IP address are assigned and how they work. Nevertheless, I'd think it a potential security problem to expose one's addresses on a public forum. (Yes, I know this is a 'newsgroup', not a 'forum' -- unless 'forum' is used in it's more generic meaning, which I do. ;-0 ) Some time ago on this ng someone posted their tnsnames and exposed their full domain name -- from a .mil domain. Another participant was able to demonstrate that they had actually entered that system. Caused quite a furor. Check the thread at
http://groups.google.com/groups?hl=en&lr=&threadm=3D2D915D.52845DF3%40d2mail.de&rnum=1&prev=/groups%3Fhl%3Den%26lr%3D%26q%3D.mil%26btnG%3DSearch%26meta%3Dgroup%253Dcomp.databases.oracle.server Received on Tue Oct 12 2004 - 07:33:55 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US