| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re: Firewall -- ORA-12535: TNS:operation timed out
Oh boy!
You need to fix that firewall. You should
a) allow your local nodes to go out on Oracle*Net port (and I advise against
1521, 1526 and 1527).
b) allow certain IP addresses to go in your LAN by using Oracle*Net port.
Second thing to do would be to have a SSL firewall and use Advanced Networking
or, alternatively, configure Oracle*Net to tunnel through firewalls by using
ssh. The latter is described on in the following article by R. Schrag:
http://www.dbspecialists.com/presentations/net8_security.html
There are tons of options for you and I could easily write an article about Oracle*Net and firewalls (Thermopilae in Greek). The best thing to do is to read a few articles about firewalls and Oracle*Net until you find something that fits your needs. It's half past midnight and I'm tired. May gods be with you. There was a guy named Leonidas who was the original security administrator at the original firewall. Be brave, your work is much easier then his was.
On 2003.07.10 00:44, Bob Robert wrote:
Could someone share with me if you come across similar
kind of configuration.
--- Mladen Gogala <[EMAIL PROTECTED]> wrote:
> You obviously do need special configuration.
> You are welcome.
>
> On 2003.07.08 17:09, Bob Robert wrote:
> > All,
> >
> > I am getting following error message when I try to
> > connect though firewall (from DMZ to Network).
> >
> > ORA-12535: TNS:operation timed out
> >
> > Do I need to do special configuration (like cman)
> > around firewall?
> >
> > Thanks In Advance,
> > Bob
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > SBC Yahoo! DSL - Now only $29.95 per month!
> > http://sbc.yahoo.com
> > --
> > Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> > --
> > Author: Bob Robert
> > INET: [EMAIL PROTECTED]
> >
> > Fat City Network Services -- 858-538-5051
> http://www.fatcity.com
> > San Diego, California -- Mailing list and
> web hosting services
> >
>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Bob Robert INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Mladen Gogala Oracle DBA -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mladen Gogala INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Wed Jul 09 2003 - 23:40:48 CDT
 |
 |