Timeout when trying to reach an oracle database through a firewall...

[Jonathan Bodrug]

Hello,

Here is the config:

- 1 web server inside a dmz, oracle client installed
- 1 oracle server on the lan

What is working:
If i put the webserver on the lan, i can reach the oracle server with
the net8 assistant correctly.

What is not working:
If the webserver is in the dmz i received a timeout (tns-12535
error)and the connexion test is unsuccessful...

What i tried:
- only 1521 open => does not work
- all ports open between the 2 machines => does not work

Is there a common solution to this problem ? It seems that lots of
people have the same when i search through the forums but i found no
answers...

[Turkbear]

jbodrug@europ-assistance.com (Jonathan Bodrug) wrote:
Hello,Here is the config:- 1 web server inside a dmz, oracle client installed- 1 oracle server on the lanWhat is working:If i put the webserver on the lan, i can reach the oracle server withthe net8 assistant correctly.What is not working:If the webserver is in the dmz i received a timeout (tns-12535error)and the connexion test is unsuccessful...What i tried:- only 1521 open => does not work- all ports open between the 2 machines => does not workIs there a common solution to this problem ? It seems that lots ofpeople have the same when i search through the forums but i found noanswers...

What version of Oracle; The solution is dependent on that in many cases:

The concept is that the Listener ( usually on 1521) redirects communication to an unspecified port for all further
communication with the client, so it is not known in advance what port(s) to open ( besides, opening ports defeats the
purpose of a firewall)

Look into Oracle's Connection Manager or look at a parameter of ( I believe) Listener.ora called USE_SHARED_SOCKETS

[Sybrand Bakker]

On Fri, 19 Mar 2004 10:17:05 -0600, Turkbear <john.g@dot.spamfree.com>
wrote:
Look into Oracle's Connection Manager or look at a parameter of ( I believe) Listener.ora called USE_SHARED_SOCKETS

read that *SQLNET.ORA* on the *SERVER SIDE*





--
Sybrand Bakker, Senior Oracle DBA

[Turkbear]

Sybrand Bakker <gooiditweg@nospam.demon.nl> wrote:
On Fri, 19 Mar 2004 10:17:05 -0600, Turkbear <john.g@dot.spamfree.com>wrote:Look into Oracle's Connection Manager or look at a parameter of ( I believe) Listener.ora called USE_SHARED_SOCKETSread that *SQLNET.ORA* on the *SERVER SIDE*

Thanks for the catch, Sybrand..The docs make this a lot harder to find than most other Oracle stuff..