Re:restricting user access on IP level

From: <dgoulet_at_vicr.com>
Date: Tue, 26 Sep 2000 09:32:07 -0400
Message-Id: <10631.117870@fatcity.com>

Jack,

Aside from all of the other suggestions you've gotten, I'll make the assumption your on 8.X or 8i as that's where this does come into it's own. At the start of Oracle8 protocol.ora and the interchanges died so that suggestion will not work and creating a trusted domain with it's own firewall can be expensive, but with Oracle 8.0 and beyond came Connection Manager which is not really hard to configure (cman.ora) in it's "firewall mode" where it allows or denys access to the database based on ip addresses or parts thereof. It works too, did it to myself by accident.

Dick Goulet

____________________Reply Separator____________________

Subject: restricting user access on IP level Author: nlzanen1_at_ey.nl
Date: 9/26/00 4:25 AM

Hi All,

I would like to restrict a user from logging on to the database if he/she comes from an unknown IP address.
Can this be done??

Situation:

Webserver with fixed IP-Address.
People log on to the webserver which than spawns a proces that logs on to the database using a username/password with lots of privileges to retrieve the data requested by the user.
I would not want anybody to use this username from any other machine except this one webserver.

TIA Jack

De informatie verzonden met dit E-mail bericht is uitsluitend bestemd voor de geadresseerde. Gebruik van deze informatie door anderen dan de geadresseerde is verboden. Openbaarmaking, vermenigvuldiging, verspreiding en/of verstrekking van deze informatie aan derden is niet toegestaan. Ernst & Young staat niet in voor de juiste en volledige overbrenging van de inhoud van een verzonden E-mail, noch voor tijdige ontvangst daarvan.

The information contained in this communication is confidential and may be legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. Ernst & Young is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: nlzanen1_at_ey.nl

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may

Received on Tue Sep 26 2000 - 08:32:07 CDT