Security - block oracle's listener port

[Maurizio Fulli]

Hi,
I want to block, for a specific host, oracle's listener port.
I 've write in the /etc/services the line:

oralis 1521/tcp

and in the inetd.sec, i've write:

oralis deny "oracle-client" "oracle server"

and i've run the inetd -c command.
But the client can open the oracle's istance on the oracle server.
Why? I've forgot something?

Best Regards

[Thomas Schler_1]

Maurizio,

Oracle does not use HP-UX's inetd.sec facility to establish network connections. Try to get information on how to block connections from specific hosts from the documentation of Net8.

[Stefan Farrelly]

The best way to do it is with an oracle config file; protocol.ora

See link for details;

http://www.dutchworks.nl/htbin/hpsysadmin?h=3&dn=81226&q=oracle%20listener%20block&fh

[T G Manikandan]

Oracle uses a series of ports around 1521 to 1526 by default

But it still depends as how you configure your listener. ora file as which port you have mentioned.

The best way to change the port is to change the port no. from 1521 to another in the listener.ora file and startup your listener.

[Christian Gebhardt]

Hi

You can use protocol.ora (as mentioned above), the problem is that you have to restart the listener to make the changes in this file active.

We had the same problem: we needed a dynamic filtering of hosts without restarting the listener. We uses ipfilter (small and easy to use firewall software for HP)

Chris