Re: securing Oracle tnslistener on firewall.

hi,This is very interesting. I have handled a number of Securing 
OracleImplementation projects but have yet to see this behaviour. For 
themoment, as long as stateful inbound(to oracle server) connection toport 1521 
and 1526 are allowed, SQL communications are working fine.
Can you provide more details on the high TCP port part? What kind ofsituation 
will cause the oracle listener spawn to listen on high TCPport? any threshhold 
value?  Is the spawn listener directlycommunicate with the clients or it is 
only communicate with theoriginal TNS listener process through IPC?
regards,Rick Zhong Limingwww.security.org.sgwww.sinfosec.org




On 6 Dec 2005 16:03:01 -0000, mjohn2000_99@yahoo.com<mjohn2000_99@yahoo.com> 
wrote:> Hello friends,> My oracle people tell me to open up all TCP high ports 
to allow SQL communication. I see a security issue there because it would open 
up about 60K ports.>> My test shows that the only port used by TNS listener is 
1521. But, oracle people claim that when there is need for many connections, 
oracle would spawn more dedicated process for each connection and redirect 
connections to random high ports. My research showed that claim is correct. 
But, it is a risky thing to open up too many ports.>> Please advise me how I 
can make the SQL communication secure. If u know any article explain the 
security, please point me on that direction.>> Thank you….> John>