Re: Firewalling Oracle

From: Ray Stell <stellr_at_cns.vt.edu>
Date: 2006-01-12 15:19:29
Message-id: 20060112141929.GA19539@cns.vt.edu

On Wed, Jan 11, 2006 at 03:01:55PM -0800, Jared Still wrote:
> Our boxes are all behind a firewall.
>
> I got dinged for not using TCP checking in the listener.
>
> Seems overkill to me.

Single point of failure? Host based firewalls are another line of defense. I use iptables/ipf, I suspect this is lower in the stack than the ora mess.

Disgruntled employees happen, do you trust everyone inside the firewall?

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Jan 12 2006 - 15:19:29 CST