Re: Can I refuse all connections except replication?

Do man inetd.sec , there u can restrict IP's but not ports - there should be a line in insetd.sec ( u need to run /sbin/init q for inetd deamon to make it effective ) servivename deny all servicename allow 10.12.12.199 This way only ur informix primary machine can connect ( and users from primary machine ). I dont know what will happen to already established connections, u can try it out. Rgds Preetinder Dave Thacker wrote: >Informix 9.30 running on AIX 4.3.3 >I have two instances running EDR in update anywhere mode. All >connections are usually made to the "primary" instance. The >transactions flow from the "primary" to the "backup" unless we declare >a disaster. We use internal DNS to control where the various clients >on our WAN "see" the primary server. When we run a DR drill, we >change the DNS entry for the "primary" to the "backup". When the >drill is over we flip the DNS entry back. Many servers cache the >"disaster mode" DNS and we've found they continue to connect to >"backup" after DNS is changed. > >I've been asked by management if there is a way to block all TCP/IP >connections to the database *except* for replication connections. When >we resume normal operations, we'd like the "backup" database to refuse >all connections except those sending replication transactions from >the primary server. > >I don't see a mode like this anwhere in the Administrators Guide, Is >there a way to do this? > >TIA > >Dave Thacker > > > sending to informix-list