TCP MyClient:1177 MyServer:5010 ESTABLISHED
TCP MyClient:1186 MyServer:5010 ESTABLISHED
TCP MyClient:1194 MyServer:5010 ESTABLISHED
The top two (ports 1177 and 1186) are application connections, the bottom
one (port 1194) is an ISQL session.
My customer is planning on implementing a firewall between clients and
server, and needs to be able to allow/deny traffic on specific ports.
Consequently he needs to know the range of client-side ports that Sybase
will use for these connections. I have reviewed the documentation and
searched the internet but cannot find any information on the port ranges
that will be used. Are these fixed ? Configurable ? Any information would
be welcome.
Thanks,
Steve.
HTH,
Rob V.
-------------------------------------------------------------
Rob Verschoor
Certified Sybase Professional DBA for ASE 12.5/12.0/11.5/11.0
and Replication Server 12.5 / TeamSybase
Author of Sybase books (order online at www.sypron.nl/shop):
"Tips, Tricks & Recipes for Sybase ASE" (new edition!)
"The Complete Sybase ASE Quick Reference Guide" (new edition!)
"The Complete Sybase Replication Server Quick Reference Guide"
mailto:r...@YOUR.SPAM.sypron.nl.NOT.FOR.ME
http://www.sypron.nl
Sypron B.V., P.O.Box 10695, 2501HR Den Haag, The Netherlands
-------------------------------------------------------------
"HP News Feed" <steveTrilb...@hp.com> wrote in message
news:f2h82o$3bp$1...@news-pa1.hpl.hp.com...
Regards,
Steve.
"Rob Verschoor" <r...@DO.NOT.SPAM.sypron.nl.REMOVE.THIS.DECOY> wrote in
message news:c198c$464c387a$3ea37b30$29...@news.chello.nl...
Rob V.
"HP News Feed" <steveTrilb...@hp.com> wrote in message
news:f2hktk$j13$1...@news-pa1.hpl.hp.com...
> Thanks for the prompt reply Rob. I don't suppose you know how the OS (Win
> XP) chooses which port to use ? Does Sybase make a system call to get one
> allocated ?
Sybase just makes an OS system call to create the socket. There is no way
to know which ports this will use.
The firewall should be built in such a way that connections opened from
inside the firewall to the allowed port (say port 5000) are allowed, but
that connections that aren't initiated from inside the secure zone aren't
allowed.
Michael
--
Michael Peppler - Peppler Consulting SaRL
mpep...@peppler.org - http://www.peppler.org
Sybase DBA/Developer - TeamSybase: http://www.teamsybase.com
Sybase on Linux FAQ - http://www.peppler.org/FAQ/linux.html