This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ORACLE 8i

Hi,
i have problems to connect a client to my Oracle 8i-Database located in the DMZ.

Does anybody have expieriences with Oracle and ASL?

THX

This thread was automatically locked due to age.

Parents

0 Darryl Smith over 23 years ago

G'Day

I suspect that it is ports that are not open. I cannot remember what ports should be open for ORACLE, but that will be the issue.

Go into Proxy, and look at the live log and see what is being dropped...

Darryl
Cancel
Vote Up 0 Vote Down

Cancel
0 tom_01 over 23 years ago in reply to Darryl Smith
hi gerd,

oracle could use the following ports:

But maybe it uses even other ports. You should monitor the packet filter LiveLog while making a connection attempt to find out which ports are missing.

/tom
Cancel
Vote Up 0 Vote Down

Cancel
0 Jon Griffin over 23 years ago in reply to tom_01

Oracle in its stock configuration listens on port 1521.
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerd204 over 23 years ago in reply to Jon Griffin

So Port 1521 is configured and ruled, but it's still a Problem. [:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 1ra over 23 years ago in reply to Gerd204

I had this same problem with a standard Linux/IPChains setup. Turns out that Oracle embeds the local address of the server in the data portion of the packet. The client then grabs the IP address from the data portion of the packet rather than IP header and attempts to converse with the private address (192.168.x.x) even though the FW NATs the IP headers properly - see the Oracle USENET groups and Oracle site for more info on this. Basically, until Oracle changes this functionality you cant NAT Oracle servers.
Cancel
Vote Up 0 Vote Down

Cancel
0 Roland Gaspar over 23 years ago in reply to 1ra

Oracle needs 1521 and 1525 TCP.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Roland Gaspar over 23 years ago in reply to 1ra

Oracle needs 1521 and 1525 TCP.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Roland Gaspar over 23 years ago in reply to Roland Gaspar

quote:
I had this same problem with a standard Linux/IPChains setup. Turns out that Oracle embeds the local address of the server in the data portion of the packet. The client then grabs the IP address from the data portion of the packet rather than IP header and attempts to converse with the private address (192.168.x.x) even though the FW NATs the IP headers properly - see the Oracle USENET groups and Oracle site for more info on this. Basically, until Oracle changes this functionality you cant NAT Oracle servers.

As I'm going to be doing this kind of setup soon, I was thinking of giving the oracle servers real addresses...

ie.:

say my real IP range is 198.168.108.0/24... I'd set my DMZ ( or whatever region I would place my oracle servers in) to use the same IP range... and then setup a 1:1 DNAT/SNAT solution for those particular servers; that should solve the embedding of the IP address, as it would embedd the correct address.

Any thoughts?
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael J. Cannon over 23 years ago in reply to Roland Gaspar

SSH is probably the best way to do this. If you're using Windows desktops, VanDyke's SecureCRT is the best and simplest (if not cheapest) and most reliable and logical fit for that platform.

There's an excellent general article
here (at dbspecialists.com)

If you're having issues with other tunneling questions, JInitiator or WebForms, contact me here: mcannon@ubiquicomm.com . I have some additional resources from Oracle doxcs and some whitepapers we've developed.

As an aside, we recommend Astaro over any other solutions on the server-side as it works, is easy to set up and administer and is FAR less expensive (even for an Enterprise license) than any of the Oracle solutions.
Cancel
Vote Up 0 Vote Down

Cancel