Re: question about db-server and ip-address

Hermann Himmelbauer <[email protected]> Sat, 13 Sep 2003 09:04:09 +0200
Newsgroups gmane.comp.db.sapdb.general
Message-ID <[email protected]>
On Friday 12 September 2003 19:02, [email protected] wrote:
> Hi List,
> we use a Sapdb 7.3 on a public internet-server for private usage. The
> security is just done by simple password authentication. Therefor it is
> possible, to connect from every position in internet to the sapdb. In the
> future we will have a VPN-connection to work with our server. We want to
> configure the server in a way, that every used programm (sapdb-server too)
> is only answering to the VPN-local ip address of the server and refuses any
> connection from outside.
>
> Is it possible to configure sapdb/vserver in a way, that it is listening
> only to an ip address like 192.168.0.0 and not to every incoming connection
> (0.0.0.0)

Why don't you simply set up a Firewall on your system, e.g. with Linux? A 
Linux iptables firewall is moreover proved to be reliable and secure, much 
more than "in-program" security.

This is only one simple line like:
iptables -A INPUT -p TCP -i eth0 -s ! 192.168.0.0/16 --dport 7200 -j DROP

		Regards,
		Hemann

-- 
[email protected]
GPG key ID: 299893C7 (on keyservers)
FP: 0124 2584 8809 EF2A DBF9  4902 64B4 D16B 2998 93C7