Re: restricting user access on IP level

your looking to use protocol.ora file. there is a known bug that the protocol.ora file might not be read(bug #920257 in 8.1.5) if the protocol.ora does not work, then name it .protocol.ora (notice the leading dot) and it should work.

here are the parts you 'll want to read

         tcp.excluded_nodes= (hr.com, 144.25.5.25)
         tcp.invited_nodes= (sales.com, 144.185.5.73)
          tcp.validnode_checking=yes

hth, joe

nlzanen1_at_ey.nl wrote:

> Hi All,
>
> I would like to restrict a user from logging on to the database if he/she
> comes from an unknown IP address.
> Can this be done??
>
> Situation:
>
> Webserver with fixed IP-Address.
> People log on to the webserver which than spawns a proces that logs on to
> the database using a username/password with lots of privileges to retrieve
> the data requested by the user.
> I would not want anybody to use this username from any other machine except
> this one webserver.
>
> TIA
>
> Jack
>
> ===================================================================
> De informatie verzonden met dit E-mail bericht is uitsluitend bestemd voor
> de geadresseerde. Gebruik van deze informatie door anderen dan de
> geadresseerde is verboden. Openbaarmaking, vermenigvuldiging, verspreiding
> en/of verstrekking van deze informatie aan derden is niet toegestaan.
> Ernst & Young staat niet in voor de juiste en volledige overbrenging van de
> inhoud van een verzonden E-mail, noch voor tijdige ontvangst daarvan.
> ===================================================================
> The information contained in this communication is confidential and may be
> legally privileged. It is intended solely for the use of the individual or
> entity to whom it is addressed and others authorised to receive it. If you
> are not the intended recipient you are hereby notified that any disclosure,
> copying, distribution or taking any action in reliance on the contents of
> this information is strictly prohibited and may be unlawful. Ernst &
> Young is neither liable for the proper and complete transmission of the
> information contained in this communication nor for any delay in its
> receipt.
> ===================================================================
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author:
> INET: nlzanen1_at_ey.nl
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
Received on Tue Sep 26 2000 - 07:12:16 CDT