Re: Prohibiting ODBC access
Posted in 1998
Topics: Connectivity: ODBC / JDBC / .NET, Networking & sqlhosts Configuration, Platform-Specific Issues
Neil Truby wrote: > OnLine v7 on Solaris 2.5. > > Does anyone have any ideas how I can prohibit ODBC access to my database > server from anyone, including users who might otherwise be valid > database users? > > The system I have isn't really Client/Server, in that users telnet in. > Therefore one idea I've had is to configure only a shared memory > connection to the server. I think this would work but, if we do acquire > a networked front-end for our database, I'll have to configure TCP/IP > connections for that. > > Suggestions/questions for clarification gratefully received. > > Thanks > > Neil Truby > Chase Manhattan Bank > Bournemouth, UK If you don't let the PCs know the Informix service then ODBC connection will not work. If you are using NT as clients, it's straightforward, 95 is more problematic due to its own security (or lack of), Win311 is straightforward if you are using some form of NFS. If the ODBC access is from the outside world then block it at the firewall. I believe if you set the service port to less than 1024 then it is possible to get Unix to throw more security at the port, but I've forgotten what and how. However, if your users are only telnetting in at the moment then your tcp connections to the engine. -- Paul Watson # WF Software Ltd #I don't suffer from stress - Tel: +44 1436 674729 #I'm a carrier. Fax: +44 1436 678693 # www.wfsoftware.co.uk #