 |
|
Oracle Tips by Burleson |
Chapter 7 Oracle Network Security
(ADDRESS_LIST
=
(ADDRESS =
(PROTOCOL = TCP)
(HOST =
portforward.proligence.com)
(PORT = 8080)
)
)
(CONNECT_DATA =
(SERVICE_NAME = CLAIMDB1)
)
)
The applications will be now connected through this SSH port
forwarder.
Preventing Port
Redirection
The third method is preventing TNS from
providing a different port to the client. This approach is not
recommended, but can be used in some cases.
Under Windows, there is a key USE_SHARED_SOCKET
under the tree HKEY_LOCAL_MACHINE\Software\Oracle that controls the
port redirection. If this key is set to TRUE, then listener handles
all connections. Remember from our earlier discussion on the
networking connection model that the listener's role is completed
when the client connects. Under this approach, even if the listener
goes down, the connections are not affected. By setting the registry
key, all connections flow through the listener process, making it a
single point of failure. If the listener service dies, so do all the
sessions. In addition, the listener also becomes a single point of
contention with request and response queues processed serially.
The above text is
an excerpt from:
Oracle Privacy Security Auditing
The
Final Word on Oracle Security
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only $39.95 and has an
immediate download of working security scripts:
http://rampant-books.com/book_2003_2_audit.htm
|