not sure about your network setup, but you could allow ssh in on a really high
port like 62222, change sshd config to listen on this port and if this machine
can talk to the oracle box the client can create an ssh tunnel this way you are
only allowing one port
Bruce Martins
Systems Administrator
EXTEND>>MEDIA
190 Liberty Street
Toronto, Ontario
Canada
M6K 3L5
_______________________
e:bmartins@extend.com
t: (416) 535-4222 ext. 2307
f: (416) 535-1201
http://www.extend.com
--------------------------
Sent from my BlackBerry Wireless Handheld
-----Original Message-----
From: Wee Seng Lim <wslim22@gmail.com>
To: Straw Shake <mcstrawberrymilkshake@hotmail.com>
CC: firewalls@securityfocus.com <firewalls@securityfocus.com>
Sent: Sun Dec 25 05:55:22 2005
Subject: Re: Firewall DMZs
Try secure ftp. SSH Tectia. Create two set of rules. One for the partner using
FTP and the other using Oracle. Limit the number of open port for each services.
On 12/18/05, Straw Shake <mcstrawberrymilkshake@hotmail.com> wrote:
We currently have a firewall DMZ containing a server that has FTP and an
Oracle server running.FTP is used by partners accessing the ftp services to
pick-up or dump files. The Oracle is used by another partner to update
entries which are in turn update din the internal DB server.
Now I know this is not right. But what are my options to secure or improve
this setup?
Thanks
_________________________________________________________________
Powerful Parental Controls Let your child discover the best the Internet has
to offer.
<http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines>
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines
Start enjoying all the benefits of MSN® Premium right now and get the
first two months FREE*.
