Oh boy!
You need to fix that firewall. You should
a) allow your local nodes to go out on Oracle*Net port (and I advise against
   1521, 1526 and 1527).
b) allow certain IP addresses to go in your LAN by using Oracle*Net port.

Second thing to do would be to have a SSL firewall and use Advanced Networking or, alternatively, configure Oracle*Net to tunnel through firewalls by using ssh. The latter is described on in the following article by R. Schrag:
http://www.dbspecialists.com/presentations/net8_security.html


There are tons of options for you and I could easily write an article about Oracle*Net and firewalls (Thermopilae in Greek). The best thing to do is to read a few articles about firewalls and Oracle*Net until you find something that fits your needs. It's half past midnight and I'm tired. May gods be with you. There was a guy named Leonidas who was the original security administrator at the original firewall. Be brave, your work is much easier then his was.

On 2003.07.10 00:44, Bob Robert wrote:
Could someone share with me if you come across similar
kind of configuration.
--- Mladen Gogala <[EMAIL PROTECTED]> wrote:
> You obviously do need special configuration.
> You are welcome.
>
> On 2003.07.08 17:09, Bob Robert wrote:
> > All,
> >
> > I am getting following error message when I try to
> > connect though firewall (from DMZ to Network).
> >
> > ORA-12535: TNS:operation timed out
> >
> > Do I need to do special configuration (like cman)
> > around firewall?
> >
> > Thanks In Advance,
> > Bob
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > SBC Yahoo! DSL - Now only $29.95 per month!
> > http://sbc.yahoo.com
> > --
> > Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> > --
> > Author: Bob Robert
> >   INET: [EMAIL PROTECTED]
> >
> > Fat City Network Services    -- 858-538-5051
> http://www.fatcity.com
> > San Diego, California        -- Mailing list and
> web hosting services
> >
>
---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an
> E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> ORACLE-L
> > (or the name of mailing list you want to be
> removed from).  You may
> > also send the HELP command for other information
> (like subscribing).
> >
>
> --
> Mladen Gogala
> Oracle DBA
> --
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> --
> Author: Mladen Gogala
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services    -- 858-538-5051
> http://www.fatcity.com
> San Diego, California        -- Mailing list and web
> hosting services
>
---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> the message BODY, include a line containing: UNSUB
> ORACLE-L
> (or the name of mailing list you want to be removed
> from).  You may
> also send the HELP command for other information
> (like subscribing).


__________________________________ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Bob Robert INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


-- Mladen Gogala Oracle DBA -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mladen Gogala INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



Reply via email to