Re: Can I restrict connections to the Mckoi server by IP address?

Tobias Downer <[email protected]>
Newsgroups gmane.comp.db.mckoi
Message-ID <[email protected]>
If you are restricting access to a local network, it is always best to 
use a firewall to limit what can and can't connect.  However, Mckoi does 
also provide a way to restrict by IP address per user with the 
SYS_INFO.sUSRUserConnectPriv table.  If you wish to allow connections 
from all IP addresses starting with '192.168.11.' for user 'user1' then 
you may use the following query;

   INSERT INTO SYS_INFO.sUSRUserConnectPriv VALUES
     ( 'user1', 'TCP', '192.168.11.%', 'ALLOW' );

You can add any number of individual IP address or ranges to this table 
as you wish.  You can also 'DENY' certain IP addresses also.  Note that 
all users start with an 'allow all' entry in this table that you will 
need to delete for this feature to work.

But as I said, it's preferrable to use an OS level firewall than this 
feature in Mckoi for the best security.

Toby.

M. A. Sridhar wrote:

> Hi,
> 
> Is it possible to set up the Mckoi server so that it accepts connections only
> from certain IP addresses? Perhaps something like 
> 
> allowedAddresses=192.168.11.,192.168.2.
> 
> in the db.conf file? I would like to set it up with such a restriction so as
> to add one more layer of security.
> 
> Thanks in advance.
> 
> =====
> M. A. Sridhar
> 
> 
> 		
> __________________________________ 
> Do you Yahoo!? 
> All your favorites on one personal page – Try My Yahoo!
> http://my.yahoo.com 
> 
> 
> ---------------------------------------------------------------
> Mckoi SQL Database mailing list  http://www.mckoi.com/database/
> To unsubscribe, send a message to [email protected]
> 
> 



---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.