Set IP address access restrictions for oracle11gip

Source: Internet
Author: User

Set IP address access restrictions for oracle11gip

For data security considerations, make some restrictions on the IP address of the oracle database. Only a fixed IP address can be accessed.

Modify the $ JAVA_HOME/NETWORK/ADMIN/sqlnet. ora File

Add the following content (marked in red ):

# Enable ip address Restriction
Tcp. validnode_checking = yes
# List of IP addresses allowed to access the database. Separate multiple IP addresses with commas
Tcp. invited_nodes = (192.168.1.110)
# List of IP addresses that are prohibited from accessing the database. Separate multiple IP addresses with commas (,).
Tcp. excluded_nodes = (192.168.1.111)

Restart the listener.

Note:

1. The first line must be written. Any platform can, but only applies to TCP/IP.

2. Write any row in the second and third rows. If both tcp. invited_nodes and tcp. excluded_nodes both exist, tcp. invited_nodes is used as the primary node.

3. Do not disable the IP address of the local server. Otherwise, the listener cannot be started or stopped through lsnrctl because the listener accesses the listener through the local IP address.




Set IP address access restrictions

Set IP address access restrictions on the server
You can allow or deny access to a specific IP address of the SMTP virtual server. By default, all IP addresses can access the SMTP virtual server. You can set access restrictions by specifying a single IP address, a group of addresses using the subnet mask, or a domain name.

Important you must be a member of the Administrators group on the local computer or be granted permissions to perform the following steps. As the best security operation, log on to your computer using an account that is not in the Administrators group, and run the command as an administrator to run IIS manager. At the command prompt, type runas/user: administrative_accountname "mmc % systemroot % \ system32 \ inetsrv \ iis. msc ".

Set IP address access restrictions

In the IIS manager, right-click the SMTP virtual server and click "properties ".
Click the access tab, and under Connection Control, click Connect ".
Click only the following lists or only the following lists ".
To add a computer to the list, click Add ".
To delete a computer from the list, select one and click Delete ".

Set IP address access restrictions

You are not authorized to view this page
There is a list of IP addresses that are not allowed to access the website on the Web server you are trying to access, and the IP address of the computer you are using is also in it.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.