Re: Keeping a DB from Phoning Home...
Date: Fri, 13 Sep 2013 14:56:30 +1200
Message-ID: <CAKE9HuMVxT1X9FHvwVoH9GVGzt+qygNtbRzn8Tuf4V_QZ+8hbw_at_mail.gmail.com>
Hi Dave,
You could try using the sqlnet.ora file in your db server with the configuration parameter
tcp.invited_nodes
tcp.validnode_checking.
More details :
http://docs.oracle.com/cd/B10500_01/network.920/a96581/sqlnet.htm
Hope it helps.
Regards
Veera
On Fri, Sep 13, 2013 at 2:24 PM, <gokulkumar.gopal_at_gmail.com> wrote:
> Hi Dave,
> How about using an AFTER LOGON trigger ?
>
> Sent from BlackBerry� on Airtel
>
> -----Original Message-----
> From: David Mann <dmann99_at_gmail.com>
> Sender: oracle-l-bounce_at_freelists.org
> Date: Thu, 12 Sep 2013 12:51:25
> To: Martin Klier<usn_at_usn-it.de>
> Reply-To: dmann99_at_gmail.com
> Cc: Mark.Bobak_at_proquest.com<Mark.Bobak_at_proquest.com>;
> oracle-l_at_freelists.org<oracle-l_at_freelists.org>
> Subject: Re: Keeping a DB from Phoning Home...
>
> Thanks for the suggestions, I will push the networking angle more when I
> meet with the sysadmin. The biggest risk is probably from DB links which
> can be mitigated, but to be 100% sure looks like isolating it in a subnet
> or with firewall is the most reliable route. (Pun intended!)
> On Thursday, September 12, 2013, Martin Klier wrote:
>
> > Hi David,
> >
> > I agree with Mark - but my first thought was: "Why not putting it behind
> > a firewall, not allowing outgoing connections, and only allow the app
> > server to connect in [to Port 1521 via TNS]?"
> >
> > Maybe easier to achieve than reconfiguring a legacy system to a new
> subnet.
> >
> > HTH
> > Martin Klier
> >
> >
> > Mark Bobak schrieb:
> > > If you're not sure how to do that, you may want to have a chat with
> your
> > > network engineering group. It should be pretty trivial to set up.
> > >
> >
> > --
> > Usn's IT Blog for Oracle and Linux
> > http://www.usn-it.de
> >
> >
>
> --
> Dave Mann
> General Geekery | www.brainio.us
> Database Geekery | www.ba6.us | _at_ba6dotus | http://www.ba6.us/rss.xml
>
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>
-- Veerabasaiah C B "Don't take life too seriously, you will never come out of it alive" -- http://www.freelists.org/webpage/oracle-lReceived on Fri Sep 13 2013 - 04:56:30 CEST