Re: Can I restrict connections to the Mckoi server by IP address?
Tobias Downer <[email protected]>
| Newsgroups | gmane.comp.db.mckoi |
|---|---|
| Message-ID | <[email protected]> |
If you are restricting access to a local network, it is always best to
use a firewall to limit what can and can't connect. However, Mckoi does
also provide a way to restrict by IP address per user with the
SYS_INFO.sUSRUserConnectPriv table. If you wish to allow connections
from all IP addresses starting with '192.168.11.' for user 'user1' then
you may use the following query;
INSERT INTO SYS_INFO.sUSRUserConnectPriv VALUES
( 'user1', 'TCP', '192.168.11.%', 'ALLOW' );
You can add any number of individual IP address or ranges to this table
as you wish. You can also 'DENY' certain IP addresses also. Note that
all users start with an 'allow all' entry in this table that you will
need to delete for this feature to work.
But as I said, it's preferrable to use an OS level firewall than this
feature in Mckoi for the best security.
Toby.
M. A. Sridhar wrote:
> Hi,
>
> Is it possible to set up the Mckoi server so that it accepts connections only
> from certain IP addresses? Perhaps something like
>
> allowedAddresses=192.168.11.,192.168.2.
>
> in the db.conf file? I would like to set it up with such a restriction so as
> to add one more layer of security.
>
> Thanks in advance.
>
> =====
> M. A. Sridhar
>
>
>
> __________________________________
> Do you Yahoo!?
> All your favorites on one personal page – Try My Yahoo!
> http://my.yahoo.com
>
>
> ---------------------------------------------------------------
> Mckoi SQL Database mailing list http://www.mckoi.com/database/
> To unsubscribe, send a message to [email protected]
>
>
---------------------------------------------------------------
Mckoi SQL Database mailing list http://www.mckoi.com/database/
To unsubscribe, send a message to [email protected]