TCP.invited_nodes

Similar Questions

• TCP.invited_nodes settings for the entire network

  
  I have a test 11.2.0.4 DB which will eventually become a production DB. I am applying the MARINE DISA to. One of the parameters is to use either the Oracle connection manager or apply tcp.invited_nodes. I have about 100 computers that will access the DB via their client software. What is the best way to apply control STIG. I can't foresee adding all 100 ip addresses in the sqlnet.ora file. Thank you.

  Emad Al-Mousa wrote:

  Hello

  I don't think that 1000 hostnames in your file sqlnet can be easily. If your objective to protect illegal database access, while they cannot access unless you have the name of user and password to one account in the database.

  But if someone does not have the credentials (for the argument, let's say he stole their) he can get to the database from anywhere if the network routing allows.

  And, uh, the OP said 100 jobs, not 1000.  This fault of typing is an order of magnitude difference.

  I feed the pain of the OP.  I also had to deal with the DISA STIG spotted requirements which, in this case, are very short.  Secruity level network (for example invited_nodes of tns) should really be done by the router/firewall. TCP.invited nodes requires constant manual adjustment.  Suppose we go to the effort of registering manually the IP 100.  (The parameter even that accepts several?) One could assume that those are the addresses of the workstations that receive their address from the DHCP server.  So as soon as the administrator creates the list, it starts wrong as data workstations will receive new addresses.  And they will receive them often.  Also, the same environment that requires this solution requires that all windows machines apply to all windows updates "immediately".  So every Tuesday you get a group of workstations is restarted and quite probably get new IP addresses.

  Not to mention the new machines to come on the line and old machines being purchased - all without notifying the ADMINISTRATOR to update its list.

  To the op.  In the light of what I have described above, if your list of 100 workstations all in the same subnet, your job is actually quite easy.  You just need to crack coding these 100 addresses.  You could do it now.  To avoid the question of maintenance I have indicated above, you want to go ahead and list all * addresses of potential.

• invited_nodes

  Play w / tcp.invited_nodes, but do not get the expected results.
  
  DB server - oracle 10.2.0.4.0 EE on OEL 4.5 - running under VMplayer on my laptop
  Customer - Oracle 10.2.0.4.0 on WinXP Pro - running on the operating system that hosts the VM
  
  VMnet config uses NAT.
  
  Here's what look like things on the linux vm Server;
  
  First the net config
  

  [oracle@vmlnx01 admin]$ uname -a
  Linux vmlnx01.vmdomain 2.6.18-164.el5 #1 SMP Thu Sep 3 02:16:47 EDT 2009 i686 i686 i386 GNU/Linux
  [oracle@vmlnx01 admin]$ ifconfig
  eth0      Link encap:Ethernet  HWaddr 00:0C:29:51:04:80  
            inet addr:192.168.160.101  Bcast:192.168.160.255  Mask:255.255.255.0
            inet6 addr: fe80::20c:29ff:fe51:480/64 Scope:Link
            UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
            RX packets:8935 errors:0 dropped:0 overruns:0 frame:0
            TX packets:1922 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:1000 
            RX bytes:841458 (821.7 KiB)  TX bytes:276010 (269.5 KiB)
            Interrupt:67 Base address:0x2024 
  
  lo        Link encap:Local Loopback  
            inet addr:127.0.0.1  Mask:255.0.0.0
            inet6 addr: ::1/128 Scope:Host
            UP LOOPBACK RUNNING  MTU:16436  Metric:1
            RX packets:1949 errors:0 dropped:0 overruns:0 frame:0
            TX packets:1949 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:0 
            RX bytes:139283 (136.0 KiB)  TX bytes:139283 (136.0 KiB)

  Then the config net oracle. Note that I have not a listener.ora - just let the listener come with all the default settings.
  

  [oracle@vmlnx01 admin]$ cat $ORACLE_HOME/network/admin/sqlnet.ora
  # sqlnet.ora Network Configuration File: C:\oracle\product\10.2.0\client_1\network\admin\sqlnet.ora
  # Generated by Oracle configuration tools.
  
  # This file is actually generated by netca. But if customers choose to 
  # install "Software Only", this file wont exist and without the native 
  # authentication, they will not be able to connect to the database on NT.
  
  #SQLNET.AUTHENTICATION_SERVICES= (NTS)
  
  #NAMES.DIRECTORY_PATH= (TNSNAMES)
  #REMOTE_LOGIN_PASSWORDFILE=NONE
  tcp.invited_nodes=(192.168.160.101,192.168.160.255)
  tcp_validnode_checking = yes
  
  [oracle@vmlnx01 admin]$ ls -l $ORACLE_HOME/network/admin
  total 20
  drwxr-x--- 2 oracle oinstall 4096 Jul 14 13:27 samples
  -rw-r--r-- 1 oracle oinstall  172 Dec 26  2003 shrept.lst
  -rw-r--r-- 1 oracle oinstall  551 Aug 19 18:54 sqlnet.ora
  -rw-r--r-- 1 oracle oinstall  467 Jul 31 07:34 sqlnet.sav
  -rw-r--r-- 1 oracle oinstall  260 Jul 14 13:43 tnsnames.ora
  [oracle@vmlnx01 admin]$

  The status of the listener:

  [oracle@vmlnx01 admin]$ lsnrctl status
  
  LSNRCTL for Linux: Version 10.2.0.4.0 - Production on 19-AUG-2010 18:45:59
  
  Copyright (c) 1991, 2007, Oracle.  All rights reserved.
  
  Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
  STATUS of the LISTENER
  ------------------------
  Alias                     LISTENER
  Version                   TNSLSNR for Linux: Version 10.2.0.4.0 - Production
  Start Date                19-AUG-2010 18:27:08
  Uptime                    0 days 0 hr. 18 min. 50 sec
  Trace Level               off
  Security                  ON: Local OS Authentication
  SNMP                      OFF
  Listener Log File         /ora00/app/oracle/product/10.2.0/db_1/network/log/listener.log
  Listening Endpoints Summary...
    (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=vmlnx01.vmdomain)(PORT=1521)))
  Services Summary...
  Service "vlnxora1" has 1 instance(s).
    Instance "vlnxora1", status READY, has 1 handler(s) for this service...
  Service "vlnxora1XDB" has 1 instance(s).
    Instance "vlnxora1", status READY, has 1 handler(s) for this service...
  Service "vlnxora1_XPT" has 1 instance(s).
    Instance "vlnxora1", status READY, has 1 handler(s) for this service...
  The command completed successfully

  And here's how things look on the client side:
  First of all, the topic of tnsnames.ora

  VLNXORA1 =
    (DESCRIPTION =
      (ADDRESS_LIST =
        (ADDRESS = (PROTOCOL = TCP)(HOST = vmlnx01)(PORT = 1521))
      )
      (CONNECT_DATA =
        (SERVICE_NAME = vlnxora1)
      )
    )

  from the local hosts file, solve the "vmlnx01":
  

  # --- virtual guest linux boxes
  192.168.160.101 vmlnx01.vmdomain vmlnx01

  And the rest:
  

  c:\data\temp>ipconfig
  
  Windows IP Configuration
  
  
  Ethernet adapter VMware Network Adapter VMnet8:
  
          Connection-specific DNS Suffix  . :
          IP Address. . . . . . . . . . . . : 192.168.160.1
          Subnet Mask . . . . . . . . . . . : 255.255.255.0
          Default Gateway . . . . . . . . . :
  
  Ethernet adapter VMware Network Adapter VMnet1:
  
          Connection-specific DNS Suffix  . :
          IP Address. . . . . . . . . . . . : 192.168.56.1
          Subnet Mask . . . . . . . . . . . : 255.255.255.0
          Default Gateway . . . . . . . . . :
  
  Ethernet adapter Wireless Network Connection:
  
          Connection-specific DNS Suffix  . : hsd1.tn.comcast.net.
          IP Address. . . . . . . . . . . . : 192.168.1.103
          Subnet Mask . . . . . . . . . . . : 255.255.255.0
          Default Gateway . . . . . . . . . : 192.168.1.1
  
  Ethernet adapter Local Area Connection 2:
  
          Media State . . . . . . . . . . . : Media disconnected
  
  Ethernet adapter Network Connect Adapter:
  
          Media State . . . . . . . . . . . : Media disconnected
  
  Ethernet adapter Local Area Connection 4:
  
          Media State . . . . . . . . . . . : Media disconnected
  
  c:\data\temp>
  c:\data\temp>sqlplus /nolog
  
  SQL*Plus: Release 10.2.0.4.0 - Production on Thu Aug 19 18:48:31 2010
  
  Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
  
  SQL> conn system@vlnxora1
  Enter password:
  Connected.
  SQL>

  and finally, the tail of the log listener, showing that realized just regard:
  

  [oracle@vmlnx01 admin]$ tail $ORACLE_HOME/network/log/listener.log
  19-AUG-2010 18:31:01 * service_update * vlnxora1 * 0
  19-AUG-2010 18:37:14 * service_update * vlnxora1 * 0
  19-AUG-2010 18:41:23 * service_update * vlnxora1 * 0
  19-AUG-2010 18:43:37 * service_update * vlnxora1 * 0
  WARNING: Subscription for node down event still pending
  19-AUG-2010 18:45:59 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=vmlnx01.vmdomain)(USER=oracle))(COMMAND=status)(ARGUMENTS=64)(SERVICE=LISTENER)(VERSION=169870336)) * status * 0
  19-AUG-2010 18:48:42 * (CONNECT_DATA=(SERVICE_NAME=vlnxora1)(CID=(PROGRAM=C:\oracle\product\10.2.0\client_1\bin\sqlplus.exe)(HOST=NGTNNB-HQDPI-12)(USER=ed.stevens2))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.160.1)(PORT=3515)) * establish * vlnxora1 * 0
  19-AUG-2010 18:48:43 * service_update * vlnxora1 * 0
  19-AUG-2010 18:49:18 * service_update * vlnxora1 * 0
  19-AUG-2010 18:50:44 * service_update * vlnxora1 * 0
  [oracle@vmlnx01 admin]$ 

  I'm stumped on, it is the customer's address wasn't specifically in INVITED_NODES, but he was able to connect in any case.

  tcp_validnode_checking = yes

  If this should not be

  TCP.validnode_checking = yes

  Misspelling?

• To restrict user login

  Dear all,

  We develop applications using oracle forms, and we use users of the database as users of the application. So I need to know is there a way to limit the connection to the database only from the application we made. Or should block the connection to the database (may be for some users atleast) when they try to connect through SQL developer or TOAD, SQLPlus, or any other method / tools. We use oracle 11g.

  Manu.

  I tried your solution but its not working properly. The log table contains data with the message as blocked, but the connection to the DB works.

  Use the sqlnet.ora.

  In this file, it is called "tcp.invited_nodes" and you can list all the IP addresses that will open a session in the DB server.

  IP address of the application server most can be listed.

  This will disable ALL connections to all other servers.

• blocking direct access to the oracle server

  Dear Sir

  One of our condition of pci - dss to stop direct access to the db. One solution I know:

  TCP.validnode_checking = YES

  TCP.invited_nodes = (192.168.1.91, visionhost.solutionbeacon.com)

  But this option will allow the IP address of the node invited with sqlplus using tns names also. Have any have experience to solve the problem of ending up with pci - dss?

  In which paragraph of the PCI - DSS doc that makes you think that there is a problem? I work with version 3.0 (November 2013) and I can't find anything like that. For example, paragraph 8.7 c, "review of database access control settings and application of database to verify configuration settings that the user access directly to the or queries of databases are limited to database administrators" does not say that the DBA is not able to connect to the application server. And all the stuff of firewall in requirement 1 close the access to the network and between networks, not within the network.

  Are you sure that you have a problem? There is no interest to 'fix' something that doesn't have a reference in the doc.

• substituted the SQLNET.ora parameter value

  Hello
  
  In my value sqlnet.ora is written twice. Its production.
  

  SQLNET.AUTHENTICATION_SERVICES= (NTS)
  
  NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
  tcp.validnode_checking = yes
  tcp.invited_nodes = (localhost,,172.168.255.12)
  
  
  #### Attributes from protocol.ora ####
  
  tcp.validnode_checking = no
  tcp.invited_nodes = (localhost,172.168.255.12)

  My question is "what is the value has been set. Yes/No ".
  
  TCP.validnode_checking = Yes OR no
  
  How to see what value is made by net sql
  
  Thanks in advance

  In my view, .ora files will use everything he finds the last, but I agree with the comment on the test.

  I say that because I remember hair long tear because my changes a tnsnames.ora were ignored. Finally, I figured out that I was not scroll down far enough to see the duplicate entry. Oh!

• How to assign the IP address for server outbount database connections?

  Hello
  
  I have servers from database (11.2.0.2) with (tcp.invited_nodes in sqlnet.ora) IP filtering. Another database server (let's call it the CBD) has a database of links to servers with IP filtering. BDC server has two network interfaces, only the one which is registered in sqlnet.ora remote database. How do I apply Oracle to use only this network (i.e. one IP addresses possible) interfaces when connection to the remote database?
  
  Thanks in advance,
  Constantin

  Hello
  Oracle will just obey the rules of routing in place on the server and use the ip address that would allow him to get there. Netowrking will use the default gateway defined on the server, unless there is a routing rule expicit saying to use another interface.

  Kind regards
  Harry

• How to prevent the registry REMOTE LISTENING on SCAN LISTENER

  Hi all
  
  Oracle 11.2.0.3 database
  
  How to prevent remote recording on SCAN listener?
  I need to know if there is a way to prevent a grid of the proceeding on the listener by using the parameter remote_listener without affecting the incoming client connection.
  
  These setting below is not sufficient to meet my tests:

  tcp.validnode_checking = YES
  tcp.excluded_nodes = {list of IP addresses}
  tcp.invited_nodes = {list of IP addresses}

  The parameters tcp.excluded_nodes and tcp.invited_nodes deny and activate specific IP addresses client to make connections to the Oracle listening port.
  
  
  Levi Pereira

  Hi all

  MarkusM give me a wonderful solution:

  * The use of the secure Transport class (COST) to restrict the Instance of record with SCAN listeners [1340831.1 ID] *.

  CVE-2012-1675 Oracle security alert # added
  http://www.Oracle.com/technetwork/topics/security/alert-CVE-2012-1675-1608180.html

  I hope this helps others.

  Kind regards
  Levi Pereira

  Published by: Levi Pereira on May 7, 2012 14:37

• I have here a way to force the client to use a virtual IP address?

  If a client makes a connection between a server where multiple IP addresses are active - is there a way to influence that one is chosen for outgoing traffic?
  Background:
  The application is moved as well as its virtual IP address.
  After reinstalling the "sender address" should be the same for the tcp.invited_nodes-based IP filtering.
  
  Thanks in advance!

  PILOG wrote:
  Or boil down to the question: is there a function for connection sqlnet as "-b" for ssh?

  Nope. Don't remember seeing such an option. Server side, this feature is of course available to bind endpoints tcp specific IPS.

  Why exactly do you need this function on the client side? I don't understand the "+ the client connects using the IP addresses changing, even if the application is to have a virtual IP unique and constant. "This requires a source more open on the FW between DB and the customer as necessary +" problem you stated.

  If the client opens 2 connections to the base, then it will be 2 connections through the firewall. As the private client port will be different for each connection and make the unique connection.

  Now if these 2 client connection use IP1 and IP2 on the client for the connection, won't matter - as 2 separate connections will be created independently.

  If for some reason you want to from the db server or firewall see these client connections entering as minimum IP sources - then you can do this by using a unique IP address for all incoming connections by NAT'ing.

  You ask a NAT firewall (using iptables for example) and simply rewrite incoming IP headers for tcp on 1521 packets the IP NAT and transfer the package on the firewall/db server.

  This server will see a unique client IP only for all inbound traffic. Works pretty well for Oracle that the client connection string includes the hostname of the client/hostid - so you can always in Oracle see what session is from a client who, despite all these sessions with the same source IP address.

• ORA-12537: TNS:connection closed

  Hello
  
  Please help me solve this problem: when I try to access my testdb, I get the following error:
  
  [oracle@RedHatU5 admin] $ sqlplus adi/adi@testdb
  
  SQL * more: version 11.1.0.6.0 - Production on Mon Mar 21 13:40:28 2011
  
  Copyright (c) 1982, 2007, Oracle.  All rights reserved.
  
  ERROR:
  ORA-12537: TNS:connection closed
  
  Please find below some symptoms:
  
  I created the following files manually in $ORACLe_HOME/network/admin, as below:
  
  #sqlnet.ora #.
  
  NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)
  + #SQLNET.expire_time = 0 +.
  + #TCP.validnode_checking = YES +.
  TCP.invited_nodes = (x.x.x.x)
  
  #tnsnames.ora #.
  
  brmtest =
  (DESCRIPTION =
  (ADDRESS_LIST =
  (ADDRESS = (PROTOCOL = TCP) (Host = RedHatU5)(Port = 1521))
  )
  (CONNECT_DATA =
  (SERVER = DEDICATED)
  (SERVICE_NAME = testdb)
  )
  )
  
  EXTPROC_CONNECTION_DATA =
  (DESCRIPTION =
  (ADDRESS_LIST =
  (ADDRESS = (PROTOCOL = IPC) (KEY = EXTPROC1)))
  (CONNECT_DATA =
  (SID = TestDB)))
  
  
  Default listener works correctly:
  
  [oracle@RedHatU5 admin] $ lsnrctl status
  
  LSNRCTL for Linux: Version 11.1.0.6.0 - Production on March 21, 2011 13:26:40
  
  Copyright (c) 1991, 2007, Oracle.  All rights reserved.
  
  Connection to (ADDRESS = (PROTOCOL = tcp)(HOST=) (PORT = 1521))
  STATUS of the LISTENER
  ------------------------
  Alias LISTENER
  Version TNSLSNR for Linux: Version 11.1.0.6.0 - Production
  Beginning of March 21, 2011 12:59:07
  Uptime 0 days 0 h 27 min 33 sec
  Draw level off
  Security ON: OS Local Authentication
  SNMP OFF
  The listener log file /Orabrm/app/Oracle/diag/tnslsnr/RedHatU5/listener/alert/log.XML
  Summary of endpoints listening...
  + (Description = (Address = (Protocol = TCP)(Host=RedHatU5) (port = 1521))) +.
  + (Description = (Address = (Protocol = IPC) (Key = EXTPROC))) +.
  Summary of services...
  Service 'PLSExtProc' has 1 instance (s).
  Instance of 'PLSExtProc', status UNKNOWN, has 1 operation for this service...
  "Testdb" service has 2 occurrences.
  Instance "testdb", status UNKNOWN, has 1 operation for this service...
  Instance "testdb", State LOAN, has 1 operation for this service...
  Service 'testdbXDB' has 1 instance (s).
  Instance "testdb", State LOAN, has 1 operation for this service...
  Service 'testdb_XPT' has 1 instance (s).
  Instance "testdb", State LOAN, has 1 operation for this service...
  The command completed successfully
  
  [oracle@RedHatU5 admin] $ tnsping testdb
  
  AMT Ping utility for Linux: Version 11.1.0.6.0 - Production on March 21, 2011 13:34:09
  
  Copyright (c) 1997, 2007, Oracle.  All rights reserved.
  
  Use settings files:
  +/orabrm/app/Oracle/product/11.1.0/Db_1/network/admin/SQLNET.ora+
  
  
  TNSNAMES adapter used to resolve the alias
  Try to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP) (Host = RedHatU5)(Port = 1521))) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = testdb)))
  OK (0 msec)
  
  [oracle@RedHatU5 admin] $ sqlplus adi/adi@//RedHatU5:1521/testdb
  
  SQL * more: version 11.1.0.6.0 - Production on Mon Mar 21 13:35:49 2011
  
  Copyright (c) 1982, 2007, Oracle.  All rights reserved.
  
  ERROR:
  ORA-12537: TNS:connection closed
  
  SQL > connect adi@testdb
  Enter the password:
  ERROR:
  ORA-12537: TNS:connection closed
  
  
  
  WARNING: You are more connected to ORACLE.
  
  Please help me understand what's wrong in my setup
  
  Thank you
  Adrian
  
  Published by: user12908554 on March 21, 2011 04:56

  Refer to this note

  http://forums.Oracle.com/forums/thread.jspa?threadID=1002617

• AMT-12546

  Hi all
  
  This is a Prod environment
  
  I try to ship the tcp.invited_nodes parameter and assign the respective IP in the sqlnet.ora and restart the listener services.
  
  But it fails with the error below
  
  TIMESTAMP * CONNECT DATA [* PROTOCOL INFO] * EVENT [* SID] * RETURN CODE
  JUNE 16, 2010 12:09:19 * 12546
  TNS-12546: TNS:permission refused
  AMT-12560: TNS:protocol adapter error
  AMT-00516: permission denied
  
  Version: ORacle 10 g
  Platform: HP - UX
  
  PLs help

  10.11.7.165 IP address is not part of the tcp.invited_nodes.

  Werner

• ORA-12537

  Hi friends,
  
  I have a 3rd party application that runs on Oracle 10 g DB (Aix 5 L). It worked properly for 1 month now.
  
  But suddenly today it struck this ORA-12537?
  
  Which of the following statements is close to this scenario? or do you have other ideas?
  

  What to do with ORA-12537: TNS: connection closed error
  The ORA-12537 is an information message and means that the connection has been closed. This can be caused by a number of reasons:
  1. Database is shut down (maybe for nightly backup), but connection to database was kept by client.
  2. A time-out occurred on the client-connection.
  3. When firewall closes idle connections.
  3. A configuration problem in sqlnet.ora or listener.ora.
  4. You have a path name that is too long for the Oracle TNS client on windows. (MetaLink Note:263489.1 )
  This issue is due to the connection string being large enough that the connection packet is being split into two packets and then sent to the listener. There are several workarounds for the issue.
  a. Install the exe in a shorter named directory.
  b. Modify the TNS Names entry so that it is shorter.
  c. Replace domain names with IP Addresses if that shortens and vice versa.
  d. Remove any parameters from the entry that are not needed.
  e. Patch the Database Listener to the most recent version.
  5. Oracle security is enables (for example in Oracle Apps). Solution either:
  a) Edit sqlnet.ora file and add your client-ip to tcp.invited_nodes.
  b) Remove secutity by editing sqlnet.ora and comment out parameter tcp.validnode_checking = yes by adding # at the beginning of the line.

  Courtesy of Oradev.Com
  
  
  What do you mean by #1 "kept silent"?
  
  All this will fail on the first day of release, but its been running for 1 month now :(
  
  
  Thank you very much
  
  Ms. K
  
  Published by: ytterp2009 on June 4, 2010 18:44
  
  Published by: ytterp2009 on June 4, 2010 18:50 changing 'Dear' to 'friend '.

  There are several reasons that occur this error. One of these processes to achieve (sessions), first check that. So now again once you get this error then connect as sysdba and:

  sqlplus "/as sysdba"
  
  select count(*) from v$session;
  
  show parameter processes;
  
  show parameter sessions;
  

  If reached setting process you increase this setting in the form:

  alter system set processes= scope=spfile;
  

  see below metalink doc.

  ' ERROR ORA-12537: TNS:connection closed "error when deploying an Application of EPMA [1083351.1 ID]

• How to activate the SQLNet Restriction?

  Hi all
  
  I need to restrict access SQLPLUS basically linking my database through the remote computer (i.e. TOAD) for all users.
  
  I did it after reading 291897.1 document id.
  
  Now there is much more complex, I need many machines to access to, is there a way I can give the IP of the machine and these machines can only access the database?
  
  Thank you
  Anchorage

  After registering the node, check the following:

  -You can find it in the file sqlnet.ora (tcp.invited_nodes)
  -You are able to ping this machine from the server «ping dbadmin.» " .com"-if it is not there, add the IP address and the host name in the server hosts file
  -Run the automatic configuration
  -Bounce services

  We finished with the above, try to connect to TOAD. If you get errors, please report it here.

• TCP. INVITED_NODES for two databases in an ORACLE_HOME

  Hello

  I have two databases in an ORACLE_HOME (11.2.0.3) and each database is accessible via the own earpiece.

  Is it possible to allow access to each database only from the IP (different IP addresses for db ech) adressess?

  The TCP parameter. INVITED_NODES (sqlnet.ora) is for any ORACLE_HOME not for specific db.

  Thank you.

  Marian

  It is not possible, other than to install two databases in two different houses.

  As a listener for each database is not necessary at all.

  Also using hard IPs in sqlnet is maintenance subject and should be avoided.

  ---------

  Sybrand Bakker

  Senior Oracle DBA

• Open the TCP Port

  I'm trying to implement a TCP port to listen to music on my home network through JRiver. The server and work remotely on my home network. But I want to access on the network side.

  I use ATT Uverse to access the internet. I disabled wireless and ATT modem to transmit to my Airport Extreme.

  I have these instructions to configure the port:

  1. Open AirPort Utility and change your AirPort Extreme or AirPort Express. Select the tab network (image). Select the sign of closer Port settings box. The Type of Firewall entry should be IPv4 Port Mapping. Enter a description like JRiver Media Center. Enter the Public 52199 TCP Port. Enter the private IP address, it's the IP address of your JRiver Media Center PC at home. Enter the TCP Port private 52199. Click on save, and then click Update. (image)

  When coming to this page, however, the firewall main entry box Type "IPv6" entered and grayed out, so it cannot be changed.

  Any help would be greatly appreciated.

  Sorry, but no image is available.

  However, to start, running the AirPort Utility > select the AirPort Extreme > change > Internet tab > Internet Options...

  What is the value to configure IPv6? If it is 'Automatically', change it to "Link-local." only (Note: I'm assuming that your ISP DO provide you IPv6 service still.)