Ringfencing your datacenter with IPfilter

Published in SysAdmin Magazine October 2004

Mike Scott, hindsight IT Ltd.

mailto:sysadmin@hindsight.it

Feedback is appreciated! - please drop me an email if you find the article useful.

Index

The original article (183KB)
13th Oct 2004

Barry Johnson writes:

... I noticed in your article that you included setting up SQL*Net connections on Port 66. I wasn't sure why you did this. Did you know that despite Oracle having laid claim to that port years ago, they ultimately never used it?

By default, all Oracle traffic uses ports > 1023: there is a Listener "control" port that, by default, is 1521 while individual sessions use other, randomly-assigned ports.


My reply:

Interesting.. I wasn't aware of this - My experience with Oracle is fairly limited, and I consulted with a DBA colleague to come up with this example. I shall now proceed to go and give him a ritual beating ;-)

In hindsight I guess, what is important here is that the concept still holds, just the implementation specifics need to be fixed.