problems accessing Oracle database through firewall..

[david902]

We have a PIX in place, a Oracle database server on DMZ and <br>
a web server outside the firewall, the web server lets <br>
members access their info from the database on <br>
DMZ2. It it not practical to allow 250,000 people authentication<br>
<br>
I believe I configured it correctly, opening a hole in the <br>
firewall to let the web server talk to the oracle database <br>
on port 1521<br>
<br>
static (dmz2,internet) xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy<br>
netmask 255.255.255.255 80 255<br>
<br>
conduit permit tcp xxx.xxx.xxx.xxx 255.255.255.192 eq sqlnet<br>
xxx.xxx.xxx.xxz 255.255.255.255<br>
<br>
timeout xlate 2:00:00<br>
timeout conn 0:20:00<br>
timeout uauth 2:00:00 absolute 0:30:00 inactivity<br>
<br>
* sorry for the x,y,z but I must protect my firewall vunerabilities.<br>
<br>
It works for a while and then after about 25 - 30 minutes<br>
of non use the connection fails with an Oracle TNS name<br>
resoultion failure. I got this error from the web page that<br>
makes a database query. I tried to change the connection<br>
timeout never to timeout but I still get the error. Any <br>
ideas as to what is going on, and ways to resolve the <br>
problem ?<br>
<br>
Thanks in advance<br>
<br>

 

[david902]

punched a hole through the firewall to allow port 80 access to a web server on DMZ, didn't need to use an aaa authenticate, the static and conduit's only allow access through the firewall on port 80. Seems secure enough.<br>
<br>
thoughts?<br>

 

[NedLudd]

We had a similar problem and it was due to tcp connections not being broken down and reaching the PIX's license limit.&nbsp;&nbsp;Use the &quot;show blocks&quot; command and look for the &quot;low&quot; count being zero in one or more rows.&nbsp;&nbsp;If that's the case you'll have to dig deep into your SQL code to find TCP connections that are not broken down after disconnection.&nbsp;&nbsp;Lazy coding on the part of BRIO, in our case.

 

[chbalu]

We are also facing the same problem. we are running a webserver before the firewall and the oracle db after the firewall. The webserver makes a connection (JDBC-OCI) using the port 1521. The connection goes through, however after 30mts or later so, the connection does seems to drop. BTW, does anyone know what is the good/bad of setting this variable in Sqlnet i.e. AUTOMATIC_IPC=ON.

Thanks in advance [sig][/sig]