Oracle client through fw-1 fails

[petewolf]

How do I get Oracle client to work through FW-1?

We are using Checkpoint Firewall-1 FP3 on a nokia IP350.

I have included sqlNet2 group which allows port 1521 but as far as I am aware the Oracle Server dynamically creates another port for client to connect to.

How do I know which ports to open?

Surely FW-1 has INSPECT code which is aware of Oracle client and should react accordingly and work?

As far as the logs are concerned the 1521 packets go through ok but nothing else gets logged and the connection stays open.


HELP!!

Pete

 

[whostolemyhandle]

Make sure you have a rule at the end of the policy that says
any any drop log
and then try the connection and watch the log files. You will soon find out what ports re required by looking at the log.