Changing the listening ports of ARD

I know how to change the listening port of SSH from 22 to some other number.
Is there any way to configure ARD (in plist maybe?) so that it can try connecting to SSH on a non-default port number.
Whilst I know how to secure SSH (not properly secured in OS X by default) I would rather change it's listening port to avoid the traffic that will simply try to bruteforce in.
So if I edit ssh_config and sshd_config on my Macs will this break ARD? Or if these conf files are properly edited (ssh_cnfig on client changed to port 22222 and sshd_config on server changed to 22222) will ARD connect seamlessly?
In short does ARD absolutely need Remote Login (SSH) to be running on the default port 22?

hmm okay, but i don't need to port forward 22 from my router to my mac to allow ARD access, only ports 5900, 5988 and 3283.
That improves things since 22 is not visible to the WAN.
Still, I'd like to know the answer to my question in the previous post.
And what about re-mapping VNC from 5900 (another obvious target although prob not vulnerable to VNC exploits since I expect Apple have modified this service and somehow hooked it into the authentication of the ssh protocol)?
Message was edited by: doz

Similar Messages

How to change the listener port number on a standby database

i want to change the listener port number from 1525 to 1545, which is running on a standby database.
i did the following steps and got some error.
1. i stop listener and modfy listener.ora
2. i login in standby DB and issue 'alter system set local_listener='(address=(pro=tcp)(host=10.10.10.10)(port=1545))';'
3. i login in dg broker and issue 'edit database 's1' set property 'LocalListenerAddress'='(address=(pro=tcp)(host=10.10.10.10)(port=1545))';' and a error coming out ORA-16703: cannot set the property while the database is enabled
4. then i disable database
DGMGRL> disable database 'ssmscs';
5. DGMGRL> edit database 's1' set property 'LocalListenerAddress'='(address=(pro=tcp)(host=10.10.10.10)(port=1545))';
Error: ORA-16541: site is not enabled
Configuration details cannot be determined by DGMGRL
what can i do ? can anybody help me out? thanks in advance.
Edited by: user1835127 on Nov 19, 2008 2:09 AM

Hi
You have to edit the following files in $ORACLE_HOME/network/admin or $TNS_ADMIN/ :
In your listener.ora on your standby
MQ_LIST =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = superman.dk)*(PORT = 1524))*
TNSNAMES.ORA (on your primary and standby)
MQ_LIST =
(DESCRIPTION =
(ADDRESS = (COMMUNITY = tcp.world)(PROTOCOL = TCP)(Host = superman.dk)*(PORT = 1524))*
(CONNECT_DATA = (SID = MQ_LIST))
after that do
lsnrctl reload

How do I change the listener port for APEX on XE

Hi all,
I did a default install of XE onto a Linux box which is my DMZ server. The default port for the listener is 8080, however I have since found that port 8080 is the port for proxy servers and therefore I cannot access APEX on my DMZ site from behind a client's proxy server.
Is there is simple way to change the listener to port 80 for access to APEX.
Many thanks
Bryan

Hi Bryan,
See http://download.oracle.com/docs/cd/B25329_01/doc/admin.102/b25107/network.htm#BHCBABJB
Hope this helps,
Andrew
http://www.apexskins.com

Changing the listener port number in a cluster environment

Hello,
I have an Oracle 10g database on a Windows cluster environment with Oracle Fail safe. I am trying to change the default listener port number - these are the steps I have done to change the port number:
1) Take the listener offline via Oracle Fail safe
2) stop the original listener from the command line
3) change the port number in the listener.ora file & save
4) start the original listener
5) bring the listener online in Fail safe
6) register the listener in the database with ALTER SYSTEM SET LOCAL_LISTENER....
After all this, when i check the status of the listener via lsnrctl, i see that the new port number is used, however in the Fail safe administrator, I still see the default port 1521. How do I go about changing the port number so that Fail safe also registers the change?

I did troubleshooting to verify the group, but this just changed the port number back to the default in the listener.ora & tnsnames.ora.
So I did all the steps again to change the port number from the default to another - via lsnrctl status, i see that the new port number is being used, I can also log in to the database via Toad using the new port number, in v$parameter i see that the local_listener is registered on the new port number....only under the Fail Safe manager, the port number (under listener parameter) has not changed....it still shows the default port number. Anyone know how to change this???

Changing the Listener Port Number

Hi RACers,
I need to change the TNS listener port number from the default of 1521 (don't ask!).
I'm on Solaris10/Oracle10g 10.2.0.3 using a 2 node cluster.
I've tried editing the relevant files, bouncing everything and re-starting CRS, but that doesn't work. I tried using Netca to delete the listener and re-create it with a different port number and that didn't work either. The instances did not re-register despite having their local_listener parameter changes.
Obviously I'm doing something wrong, but don't know what. Any ideas or do you know where a procedure to do this is documented?
Thanks in advance.

My posting was not aimed at the OP at all.. not his fault that Oracle insists on using a TCP port that's NOT registered for Oracle use.
It is all Oracle's fault that port 1521 is used instead of 1527.
As for what Oracle books say.. bahumbug. Means nothing ito playing by the same networking rules as everyone else.
Port 1527 is what is registered for and by Oracle as use for Oracle tcp traffic. Not fricken port 1521!
And why is this a problem?
If you're in the network business and deal with everything and anything from network analysis and management to rewriting ToS bytes for proper DiffServ application.. then it is very frustrating to find a major company like Oracle ignoring the networking rules.
I read that as Oracle telling us "screw you".

IOS Zone firewall (ZFW) & changing SSH listening port

I'll have to check into the deetails again but I recall there being a way to change the listening port for SSH. Not only do you have to configure SSH itself to listen on a new port but I think there was something about making the inbound interface part of a rotary group or something.
Anyway, my question is more about how the zone firewall reacts to this. If I have inspect set for SSH, (or pass) and yet change the default port for it, does the IOS still know to take the configured action on the protocol? I'll try to test this myself once I have an opportunity but may not be able to for several days, plus if anybody has anything further to add regarding any other implications this port change mgiht have, please share
Thanks!

Hi Julio,
You are ever helpful sir Howver, things are not making sense.
Ok so to take it from the top. So far I have done the following:
Router(config)#ip ssh port 2340 rotary 1
Then:
Router(config)#line vty 0 123 (123 = max # of vty lines, my actual # is different)
Router(config-line)#rotary 1
This of course does not make SSH on port 2340 work from the Internet zone to Self as I have not yet modified the firewall nor done the ip port-map command. It does work from the LAN side to Self since that zone-pair is more forgiving, however, it works on both 22 and 2340 which I thought odd since I thought the ip ssh command changes the SSH server listening port.
I have not yet permanently set the ip port-map command. However I ran it once and then did a sh ip port-map ssh
This showed system defined ssh port maps for tcp and udp on 22, and then my user defined one for tcp port 2340. Interesting that the system-defined ones are both UDP and TCP - I thought SSH was TCP only.
According to the IOS command referendces (for release 15.2), I should not be able to remove the system-defined port map entries as it would give an error. However, I did no ip port-map ssh port tcp 22 and the same for the UDP entry and they disappeared - so now for sh ip port-map ssh I get no results returned. Yet, SSH still works on 22 and 2340.
Be that as it may, after some further testing I've concluded that with or without use of the ip port-map ssh port tcp 2340 entry, SSH works (from LAN to Self) on either port 22 or 2340. It seems ip port-map has no effect on the SSH server itself (?). Or perhaps PAM is overridden by the ip ssh commands?
So at that point I decided to stop testing, not doing anything with firewall yet, until I understand things better. So far, the IOS is very confusing in it's behavior.
Changing the SSH server's listening port via ip ssh command to something other than 22 seems to not actually change anything, it just adds that port in addition to 22.
Port-application mapping appears to have no effect on the SSH server (I have not tested whether ip ssh overrides PAM or vice versa)
So far there seems to be no way to actually change port 22 usage - even "deleting" the PAM entry for ssh via 22 has no effect.
Confusing!

Problem when I tried to change weblogic listen port from 7001 to 80

HI! I have problem when I tried to change weblogic listen port from 7001 to 80. When I changed from 7001 to 7777 then all works ok! But why not on 80? With apache all works ok on 80 too.
I restart my weblogic server and then I have following errors.
<2009.1.4 16:02:13 EEST> <Notice> <WebLogicServer> <BEA-000365> <Server state ch
anged to STARTING>
2009.1.4 16:02:14 oracle.as.jmx.framework.PortableMBeanFactory setJMXFrameworkPr
oviderClass
INFO: JMX Portable Framework initialized with platform SPI "class oracle.as.jmx.
framework.wls.spi.JMXFrameworkProviderImpl"
2009.1.4 16:02:15 oracle.adf.share.config.ADFConfigFactory cleanUpApplicationSta
te
INFO: Cleaning up application state
<2009.1.4 16:02:22 EEST> <Notice> <Log Management> <BEA-170027> <The Server has
established connection with the Domain level Diagnostic Service successfully.>
<2009.1.4 16:02:22 EEST> <Notice> <WebLogicServer> <BEA-000365> <Server state ch
anged to ADMIN>
<2009.1.4 16:02:22 EEST> <Notice> <WebLogicServer> <BEA-000365> <Server state ch
anged to RESUMING>
<2009.1.4 16:02:22 EEST> <Emergency> <Security> <BEA-090087> <Server failed to b
ind to the configured Admin port. The port may already be used by another proces
s.>
<2009.1.4 16:02:22 EEST> <Error> <Server> <BEA-002606> <Unable to create a serve
r socket for listening on channel "Default". The address 85.254.224.235 might be
incorrect or another process is using port 80: java.net.BindException: Address
already in use: JVM_Bind.>
<2009.1.4 16:02:22 EEST> <Critical> <WebLogicServer> <BEA-000362> <Server failed
. Reason: Server failed to bind to any usable port. See preceeding log message f
or details.>
<2009.1.4 16:02:22 EEST> <Error> <Server> <BEA-002606> <Unable to create a serve
r socket for listening on channel "Default[2]". The address 127.0.0.1 might be i
ncorrect or another process is using port 80: java.net.BindException: Address al
ready in use: JVM_Bind.>
<2009.1.4 16:02:22 EEST> <Error> <Server> <BEA-002606> <Unable to create a serve
r socket for listening on channel "Default[1]". The address 192.168.0.102 might
be incorrect or another process is using port 80: java.net.BindException: Addres
s already in use: JVM_Bind.>
<2009.1.4 16:02:22 EEST> <Notice> <WebLogicServer> <BEA-000365> <Server state ch
anged to FAILED>
<2009.1.4 16:02:22 EEST> <Error> <WebLogicServer> <BEA-000383> <A critical servi
ce failed. The server will shut itself down>
<2009.1.4 16:02:22 EEST> <Notice> <WebLogicServer> <BEA-000365> <Server state ch
anged to FORCE_SHUTTING_DOWN>
2009.1.4 16:02:22 oracle.adf.share.config.ADFConfigFactory cleanUpApplicationSta
te
INFO: Cleaning up application state
2009.1.4 16:02:22 oracle.adf.share.config.ADFConfigFactory cleanUpApplicationSta
te
INFO: Cleaning up application state
Best regards!

Debuger,
It does not matter which WLS version I am using (although I'm using 10.3, the one that comes with JDev 11g).
The problem is that SOME OTHER PROCESS on your machine is listening on port 80. Guess you need to go to the Microsoft forums to find out how you can tell what that OTHER, NOT WLS process is.
John

How to change the default port of webdispatcher

Hello Everyone,
We wish to know to how to change the default port of SAP webpatcher port from 81$$ to 80.
Appreciate your response.
Thanks,
Vadi

Hello Vadi
you have to change the PORT value in your profile parameter from 81$$ to 80
icm/server_port_0 = PROT=HTTP,PORT=81$$ to
icm/server_port_0 = PROT=HTTP,PORT=80
Also, in SMICM, then change http service port and activate it and above parameter will require SAP restart
$$ is used generally to accomodate multiple port services running in SMICM and so as to avoid the parameter setting according to instance number of any system.
thanks
Bhudev

Changing the AFP Port? or another solution?

I have an AirPort Extreme Base Station with a hard drive attached with AFP sharing so I can access the drive over the Internet, but I want to also be able to access my OS X Server (10.5) which is behind this router. Is there any way I can change the AFP port number or somehow be able to access both remotely?
Thanks,
John

Yes,
What you should do is twofold:
1. make items readonly in your form when a record is "not new" (ie the rpimary key is set)
2. prevent the page from executing an update (you never know who/what is spoofing your pages)
the second can be done by creating a process "ON UPDATE" that triggers an error.
Regards,
Richard
blog: http://blog.warp11.nl
twitter: @rhjmartens
If this question is answered, please mark the thread as closed and assign points where earned..

Changing the HTTP port number

Hi
I want to change the HTTP port number of the SAP web AS .Any idea on this how can i do that ?
regards
rajesh

Hi Rajesh ,
just go throgh this link , u can change this using Visual Administrator
http://help.sap.com/saphelp_nw04/helpdata/en/5b/82d3c3ee9691418e6b0281f933a37d/frameset.htm
Regards
Kishor Gopinathan

Changing the admin port number

Greetings all,
I have just become the proud father of a weblogic 9 installation and the admin before me changed the admin port number. As I have NO experience with weblogic, could someone be so kind as to tell me where I can find the port number being used for the admin console?
Thanks!
Earnie!

Earnie,
First, try port 9002 (https) since that's the default.
If that doesn't work, have a look in DOMAIN_DIR\config\config.xml. In there you'll find something like this:
<administration-port>1234</administration-port>
There ya go!
Mike
Weblogic/J2EE Security Blog: http://monduke.com

Changing the TCP port on async ports in Cisco router

Hello,
My goal is to replace old terminal servers from a factory environment.
These terminal servers act as a aggregation point of terminal equipment (printers and factory automation).
Software used in this factory writes to these devices using ip-address of the terminal server and TCP-port starting at 10001, where the last number is a port number.
The problem is that in Cisco equipment, I can not find a way to change the tcp port to this 1000x. The only option would be to change the softwares TCP-port to Cisco default 200x, but this is not the solution I am looking for. This is because the switchover should be done when the machines are running, and the time window is to short to make changes in the factory software.
Is there a way to change the logical TCP-port for Cisco routers asyncronous lines (HWIC-16A) to 10001-16?
Marko Tuhkunen

So i figured out that i can use the archive tar /create command:
To copy the entire flash towards TFTP:
archive tar /create tftp://X.X.X.X/flash.tar flash:
Now i will have to insert the new flash and probably format it first towards the correct file systems. Then i will have to use the next archive command:
archive tar /xtract "Here i am unsure of the syntax, i want to be copying and extracting the tar I backed up from the old flash"
After these steps are complete can i just reboot the router with the new flash card, won't there be any issues, since the startup config is on the NVRAM it will load the config properly, and i haven't seen any boot parameters but they shouldn't pose any issues since i'm not changing the flash slot.
Thanks for your assistance

TS3152 Im using 10.7.4 and looking for a way to change the streaming port on quicktime x

Im using 10.7.4 and looking for a way to change the streaming port on quicktime x
used to be able to do via system preferences > quick time > advanced
But cant find these settings anymore
Thanks
Pavi

Click on the pull down window next to From: and you should be able to select the individual account you want to send from. The account that you want to send from must be an Enabled account in the Account Preferences of Mail.

Change the SMTP Port number in OIM

Hi All,
I have an email server that its SMTP port is 135.
My question is:
How can I change the SMTP Port from 25 to 135 in OIM? Because the notificacions are sent by Port number 25
Thanks & Regards,
Ariel

I actually don't have any other ideas on where this could be configured. I think that the port can be changed if you send emails programmatically but if you use the default OIM email system I don't know any other place where this could be configured.
Have you tried opening an SR with Oracle?
Best regards
/Martin

Changing the default port 1433 in SQL 2005 on an ECC 6.0 system

Hello everybody,
There is a requirement to change the default port of MS SQL 2005 from 1433 to a different port.
I am using SAP ECC 6.0 running on an ABAP stack. I would like to know what changes need to be done from the SAP end to achieve it. Any pointers in this regard would be helpful.
Regards
Dinesh K

<b>Sizing</b>
Hardware sizing should be completed by your SAP partner. Its based on many things. Users, modules, storage volumes, peek, BP, workloads etc etc.
You can do the 'noddy' version with the sapsize on OSS. The output from this is in 'SAPs' you could look up std systems bench marks and get something 'like' it. Else submit the results to the hardware vendor of your choice and they will do it for you.
<b>System Redundancy</b>
Depends what you are trying to do.
MSCS is a fail over HARDWARE only solution. ie if you want to patch or take a node out of service you can by 'failing over' the services on it to the other node. If you get a DB problem MSCS can not help you at all.
Log shipping gives you 'rapid' recovery options for SQL(and there in SAP). The way this normally works is via either manual or automatic log-shipping to a 'standby' system with SQL/SAP loaded on it that can be brought online if you get a problem with the main system.
A well planned system will have fail-over and recovery capabilities, ie it will use BOTH.

Changing the listening ports of ARD

Similar Messages

Maybe you are looking for