OPening ports

[Rick Stevens]

On Thu, 2005-12-15 at 21:03 +0000, jlopes151 at comcast.net wrote:
> > > I have RHEL 4 installed and want to open ports for an Oracle 10g 
> > > install. Does any one know were I can find information on how this
> is 
> > > done? 
> > 
> > I'm not certain which ports Oracle uses for network communication.
> It's 
> > undoubtedly buried in the system documentation somewhere. 
> > 
> > Once you find those, you'll need to have them "-j ACCEPT" in your 
> > iptables configuration. 
> > 
> > If you're not familiar with iptables config files, I recommend you
> use 
> > either "redhat-config-securitylevel" (Desktop->System
> Settings->Security 
> > Level) or something like Firestarter, available for free from 
> > http://firestarter.sourceforge.net. 
> > 
> 
> Thanks Rick
>  
> Some of the ports ex:HTTP have a range 5500-5540

Ah, then some of your config lines would have something like:

	-A INPUT -p tcp -s 0.0.0.0/0 --dport 5500:5540 -j ACCEPT
 
You might want to restrict the "-s 0.0.0.0/0" to a more reasonable
range for the machines you want to have access.  The one above opens
you up to connections coming from anywhere.

> Thanks for the help

No worries, mate!

----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-            Beware of programmers who carry screwdrivers            -
----------------------------------------------------------------------