Re: securing Oracle tnslistener on firewall.

Hi John!

Here are some articles that could help you figure out a solution for the
problem.

http://www.secureenterprisemag.com/howtos/showArticle.jhtml?articleId=57701821&pgno=2

http://www.dbspecialists.com/presentations/net8_security.html
 Hope it helps.

Regards,
Balaji.V
Associate Consultant
Palisade - Application Security Intelligence
http://palisade.paladion.net/

On 6 Dec 2005 16:03:01 -0000, mjohn2000_99@yahoo.com <mjohn2000_99@yahoo.com>
wrote:
> Hello friends,
> My oracle people tell me to open up all TCP high ports to allow SQL
> communication. I see a security issue there because it would open up about
> 60K ports.
>
> My test shows that the only port used by TNS listener is 1521. But, oracle
> people claim that when there is need for many connections, oracle would
> spawn more dedicated process for each connection and redirect connections to
> random high ports. My research showed that claim is correct. But, it is a
> risky thing to open up too many ports.
>
> Please advise me how I can make the SQL communication secure. If u know
> any article explain the security, please point me on that direction.
>
> Thank you….
> John