Disable access via insecure port 7001

Is there a way in OVM Manager 3.1.1 to disable access via port 7001 and only allow access via the encrypted port 7002 through the web interface? I have a customer that is trying to lock things down security wise and they would like to see that happen. Thanks!

Did you try this in the weblogic console?
http://yourserver:7001/console

Similar Messages

No internet access via ethernet port

Hi, have been using my emac via ethernet cable to router, for many months with NO problem accessing internet and others cabled to same router also having no problem and I have used my Pwr Mac wtih no problem and have never had to make any specific settings to either to access the net via the router which gets its wifi signal from elsewhere. With system preferences > network > ethernet open I can see the the router is being recognized cause it appears or dissappears as soon as I plug or unlug the ethernet cable. I open "Activity Monitor" and occasionally, very briefly, there will be data incoming( green spikes ) or outgoing( red spikes ). HD verified OK, ran disk permnissions and scripts. Have not yet run Apple or other( Micro-mat ) hardware testing programs tho I will later. Does anyone know if there is a PLIST file that can get corrupted that would affect ethernet port functioning properly? My guess it is hardware but since I can see the router is recognized makes me wonder about corrupt file ergo a system error or possibly inloaded some file that caused conflict. I also booted from my external drive and tried accessing from the cloned OS system and still did not work. The cloned system is the original has never been updated, nor has any of the applications in clone, so, if it was "system" problem the clone should have worked. However, I had cloned user ergo newest documents, library etc, so that would be the only possible source of conflicts when booted from clone system....Thx Ran

Ping test should be interesting.
Start by pinging router address. Should be able to ping building router if you can figure out it's address.
Could you go wireless to building net? You might buy a usb dongle.
USB dongle
Introducting RokIt, a new wireless USB adapter that is compatible with Mac OS 10.3, 10.4, and 10.5 Leopard.
http://rokland.com/store/productinfo.php?productsid=319
Newer Technology MAXPower 802.11n/g/b USB Adapter. The easiest way to add Wireless Connectivity to ANY computer! 2 Year Warranty.
http://eshop.macsales.com/item/Newer%20Technology/MXP802NU2C/
There are usb to ethernet cable.
You could try another browser.
*MAC Address*
Every ethernet port has a unique MAC Address. A router can block on a MAC Address. That is why I suggest you check out your router.
Note MAC is not Mac. MAC is all upper case.
definition: http://en.wikipedia.org/wiki/Mac_address
*Ethernet port hardware*
I'd say this was some kind of strange hardware problem.
*Dns problem?*
It has symptoms of a DNS problem. The little traffic is a symptom of the problem. You said all the numbers were the same, however.
Verify DNS
apple > system preferences > network
Double click on network connection you are using.
Pick the TCP/IP tab.
Verify that you have a DNS Server. If you do not, look on your windows machine and see what the net address is. You can also pick using DHCF and still enter you DNS server address.
You can use
harddrive > applications > utilities > network utility
to diagnose the situation.
You can ping google.com. Result:
Ping has started ...
PING google.com (64.233.167.99): 56 data bytes
64 bytes from 64.233.167.99: icmp_seq=0 ttl=244 time=215.362 ms
64 bytes from 64.233.167.99: icmp_seq=1 ttl=244 time=279.597 ms
64 bytes from 64.233.167.99: icmp_seq=2 ttl=244 time=189.747 ms
64 bytes from 64.233.167.99: icmp_seq=3 ttl=244 time=250.657 ms
64 bytes from 64.233.167.99: icmp_seq=4 ttl=244 time=183.232 ms
64 bytes from 64.233.167.99: icmp_seq=5 ttl=244 time=243.753 ms
64 bytes from 64.233.167.99: icmp_seq=6 ttl=244 time=173.108 ms
64 bytes from 64.233.167.99: icmp_seq=7 ttl=244 time=230.239 ms
64 bytes from 64.233.167.99: icmp_seq=8 ttl=244 time=180.639 ms
64 bytes from 64.233.167.99: icmp_seq=9 ttl=244 time=232.177 ms
--- google.com ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss
round-trip min/avg/max/stddev = 173.108/217.851/279.597/33.615 ms
If that does work, try pinging 64.233.167.99 Result:
Ping has started ...
PING 64.233.167.99 (64.233.167.99): 56 data bytes
64 bytes from 64.233.167.99: icmp_seq=0 ttl=244 time=189.655 ms
64 bytes from 64.233.167.99: icmp_seq=1 ttl=244 time=213.471 ms
64 bytes from 64.233.167.99: icmp_seq=2 ttl=244 time=257.873 ms
64 bytes from 64.233.167.99: icmp_seq=3 ttl=244 time=172.745 ms
64 bytes from 64.233.167.99: icmp_seq=4 ttl=244 time=226.723 ms
64 bytes from 64.233.167.99: icmp_seq=5 ttl=244 time=171.883 ms
64 bytes from 64.233.167.99: icmp_seq=6 ttl=244 time=260.308 ms
64 bytes from 64.233.167.99: icmp_seq=7 ttl=244 time=172.963 ms
64 bytes from 64.233.167.99: icmp_seq=8 ttl=244 time=198.840 ms
64 bytes from 64.233.167.99: icmp_seq=9 ttl=244 time=181.215 ms
--- 64.233.167.99 ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss
round-trip min/avg/max/stddev = 171.883/204.568/260.308/32.247 ms
If pinging 17.254.3.183 works but pinging Google.com doesn't. You have a bad DNS Server address.
BDAqua suggests in a post.
You can use OpenDNS for looking up web addresses.
Put these numbers in Network>TCP/IP>DNS Servers for a try...
208.67.222.222
208.67.220.220
I think they now pretend you need to join to use, but you don't.
https://www.opendns.com/homenetwork/start/device/apple-osx-tiger
(Please note that you do not need to a joint Open DNS to use it.)
http://discussions.apple.com/message.jspa?messageID=5908432#5908432
Google provides free dns lookup too. There numbers are:
8.8.8.8
8.8.4.4
Robert
=======================================================
I suggest that you try pinging Google.com.
Macintosh-HD -> Applications -> Utilities -> Terminal
mac $ ping -c4 google.com
PING google.com (64.233.187.99): 56 data bytes
64 bytes from 64.233.187.99: icmp_seq=0 ttl=245 time=177.617 ms
64 bytes from 64.233.187.99: icmp_seq=1 ttl=245 time=251.899 ms
64 bytes from 64.233.187.99: icmp_seq=2 ttl=245 time=169.291 ms
64 bytes from 64.233.187.99: icmp_seq=3 ttl=245 time=250.119 ms
--- google.com ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max/stddev = 169.291/212.232/251.899/38.894 ms
mac $ ping -c4 64.233.187.99
PING 64.233.187.99 (64.233.187.99): 56 data bytes
64 bytes from 64.233.187.99: icmp_seq=0 ttl=245 time=176.723 ms
64 bytes from 64.233.187.99: icmp_seq=1 ttl=245 time=247.889 ms
64 bytes from 64.233.187.99: icmp_seq=2 ttl=245 time=176.890 ms
64 bytes from 64.233.187.99: icmp_seq=3 ttl=245 time=244.623 ms
--- 64.233.187.99 ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max/stddev = 176.723/211.531/247.889/34.744 ms
mac $
Analysis: If you cannot ping Goolge.com but you can ping 64.233.187.99, then you need to enter you dns address. For some reason Mac OS X sometimes doesn't set the dns. You can set it manually.
apple > system preferences > network
tcp/ip tab and enter address of dns servers
example 162.33.160.100
You will need to use a different number.
PS.
You are a little short on stating results. You state what you did, but I have to guess the result.
Did: X
Result: Y
Did:
1) Power Book's ethernet cable plugged into router port 5. Working to yahoo.com.
2) Unplugged power book's ethernet cable from router
3) Plugged eMac's ethernet cable into port 5.
Result: eMac using Firefox was not able to access yahoo.com
Robert

Guest Network Access via Lan Port

I bought two of the new Apple Airport Expresses and have the Wireless working just great. I have the second one as an extender also working just as I need it to work. But is there a way to use the LAN port on either of the the units (either the Primary Access Point or the Extended one) to allow someone to connect their computer or other device via hardwire but join as a Guest Participant (so they're segregated from the rest of the network)?
Or is there a way I can connect the device to the LAN port, assign it an IP Address and then use some of the advanced tools to block it from everything else on the network except for using the internet?

No, sorry but the Guest Network cannot be extended either by wireless or Ethernet.
is there a way I can connect the device to the LAN port, assign it an IP Address and then use some of the advanced tools to block it from everything else on the network except for using the internet?
No, this is not possible with the AirPort routers.

Plex Media Server Access Via Closed Port

Hey All,
I'm running Plex Media Server on my home server (running Arch of course) and am curious how it is able to run and be accessed on port 25244 when both my router and iptables config do not have this port opened? I can access the server via port 32400, but if I go into the app settings and connect it to a myPlex account, it allows the server to be mapped to 25244.
Thanks in advance!
- James

Hi dlw,
Thanks for the reply. I have installed plex server on my home PC (which I was going to use as the server pc - a windowns 7 - 64bit) and then install plex on my ipad so that I can watch films and listen to music held on my PC.
I've installed the lastest versions of silverlight and flash and also installed the plex server software. However, when I right click on the tray icom and select media manager it tries to open http://www.localhost.com:32400/manage/ in firefox but keeps getting timed out.
Haven't got a clue why or how to resolve it, but slowly trying me insane.

On Cold Boot Up of FP2010 Locks up if Accessing Via Ethernet Port

Ok The FP2010 is powered up and if a client attempts to communicate via
ethernet to the application that is launched on startup the unit goes
off in the weeds and appears to stop the startup process. This
happens with any client app or even IE accessing the VI web page.
Any reason for this? Is there a fix or way around it?
TIA,
David

Hi David,
Could you try running a shipping example program on the FP 2010? Please do this and let me know if you run into the same problem. Also, here is a link to a FieldPoint troubleshooting tutorial: Troubleshooting Communication Problems with the FieldPoint Ethernet Network Modules.
Regards,
Hal L.

Remote TC access via port forwarding

I have been trying to setup my network for remote TC access via port forwarding. Here's my setup:
Verizon FiOS router (main router, dhcp & nat) -> connected to TC set in bridge mode with a static IP
I can remotely access the TC using Back to my Mac with no problems, and of course locally on the home network via Wifi.
Since the TC has to connect in bridge mode, port forwarding is done on the FiOS router.
If I set a port forwarding rule in the FiOS router TCP,UDP (any) to port 548, it works. However I want to use a specific connection port
so others can't connect unless they know the forwarded port. BTW, I have remote disk sharing set with Use Device Password.
So here's what works:
FiOS Router (TCP any -> 548, UDP any ->548)
What doesn't work:
FiOS router (TCP 8990 -> 548, UDP 8990 -> 548).
Is there any additional setting required for specific port forwarding to work?

You're my hero!
I also have my TC in Bridge Mode to my Verizon FIOS Router. I used to be able to access my TC remotely, but since I upgraded my router (MI424WR GigE), I had forgotten some port forwarding rules I must have established in my old router. Once I re-created these two port forwarding rules (just like yours), I can remote access my TC (with TC password) again.
In addition, I have a static host name aliased to my dynamic IP address through dyndns.org (I have the free version, which I don't think is available anymore, but there are other free providers out there) for easier remote access.
Regarding, Secure Share Disks: with TC password vs a disk password. Is one more secure than the other?
Thanks!

Network camera access via airport extreme ie: i need to assign a port and a

please help me i have a cabin in the mountains that is off the grid... and i use solar power... i have my internet access via wifi and an antenna... it goes to a d-link router in my electric room then from there via a cat 5 cable to a apple airport extreme base station... and i would like to plug the camera into the base station via a cat 5 cable....
i am trying to set up a network camera to via a airport extreme base station.... the tech support on the camera end (airlink 101 skyIP cam500 model aicn500) said to enable port 80 and to assign a IP address (which i have)... apple support has been unable to help me after almost 1 hour with tech support.... here is what the camera tech support page suggests....
You will now need to forward the Second HTTP Port through your router to the IP address of the camera. If you have an AirLink101 router, we have instructions in our knowledge base for port forwarding. If you have a router from another company, you will need to contact them for instructions on port forwarding.
When accessing the camera from a remote location you will need to open a browser and type in the internet IP address of your network (not the ip address of the camera) and the port into a web browser. The address and port will need to be typed in like this:
http://x.x.x.x:port
x.x.x.x = Internet IP address
port = Second HTTP Port
Here is an example of what it would look like: http://123.123.123.123:81
can anyone please help me?

i can not thank you enough for taking the time time to help me!!! i really appreciate it.... i have done the set up with the d link router and am now trying to access the camera from the web.... but i am having trouble logging in and finding it? i am not sure what ip address to enter into my web browser? i think that i need to add the ip addresss folllowed by a forward slash and then the port # 80.... but what ip address should i add? in the device info part of the d link router i have found a number of ip address's... but none of them seem to work? what am i doing wrong? or not doing? my apple base station is set up in the bridge mode with a password to protect it...
thanks again...
josh

Accessing Disabled Accounts via ssh

We have user accounts on our OS X Tiger Server where the user has installed a public key into their ~/.ssh/authorized_keys file.
The problem:
If I uncheck "access account" in Workgroup Manager for one of those users, they can still login to the server via ssh, authenticating with their private key.
So, how can I truly disable access to an account that has a key pair installed for ssh?
Mac OS X (10.4.5)

Have you tried using WGM to change their login shell to "none"?

How we can disable access to BOM via the Display Master Recipe (C203)?

Hi Gurus,
How we can disable access to BOM via the Display Master Recipe (C203)?
Thanks!

Hi Mae Baraquio
Have you tried screen variant to make it as display mode.
please refer below document for your reference.
Learning SHD0 with Example
if you find any query kindly revert back.
Thanks & Regards
Sandeep Kumar Praharaj

How to access servlet only via specific port?

Hi all,
I have an app with 2 servlets, I want each servlet to be accessible via a different port.
so I open HTTP on my web server, on port 80 and 18080, but now BOTH servlets are available via BOTH ports.
how can I make sure that servlet 1 is accessible only via port 80, and servlet2 is only accessible via port 18080?
tnx

Run two servers.

Unable to disable the "Enable Administration Port" (Weblogic 12.1.1.0)

Hi,
I have a Weblogic server installation from which the field "Enable Administration Port" has been checked (Probably the Administration Port is now 9002, but I cannot check it).
As a consequence I am unable to access the Console.
When I try to access the Console through the 7001 port, I get the message:
Console/Management requests or requests with <require-admin-traffic> specified to 'true' can only be made through an administration channel.
Does someone know how to disable the "Enable Administration Port"? Maybe with WSLT?
Thanks and Regards.

Solved. Port 9004 can be accessed through https.

E4200v2: Local Management Access via Wireless *ALWAYS* Enabled

I just found a slightly unsettling bug in the E4200v2 (running the latest firmware 2.0.36 build 126507).
Administration > Local Management Access > Access via Wireless ... set to DISABLED.
HOWEVER, when I attempted to access the web interface on a handy iPAD I had absolutely no problem getting through to the web interface (after providing username and passsword).
Limiting access to wired clients seems like a simple a prudent measure ... which is why this option is there for the paranoid among us.
This seems like a black-and-white bug. Comments welcome. Fix in the next firmware revisio even more welcome.

It was mentioned in another thread that disabling wireless management does indeed disable http access over port 80. However, if you're using https access--which uses port 443, that access is not blocked. So for anyone who wants to disable wireless management access, you need to enable management access via http only, and then disable the wireless access. That combination will indeed work.
I have confirmed this on my own router and can now only manage via wired connections over http.
Strange bug/oversight!

Server Admin not connecting to Leopard Server when accessing via VPN

Hi everyone,
Recently, as the title suggests, Server Admin (or Server Preferences, for that matter) would not connect to my remote server via VPN. I'm quite sure that the server is working nicely, as the users (both of them lovely young ladies with considerable charms, which makes on-site support quite interesting, if distracting) didn't call me to complain, and I can login via SSH with no problems.
The server is a Mac Mini, connected to an Airport Extreme (gigabit N), which in turn connects to our ADSL modem, if that helps any.
Now, I did tinker around a bit with the settings before this happened, so I think it's probably my fault (well, I started my "career" of administering this server a week ago, what do you expect), so I suppose I may have inadvertently limited access to a service required for Server Admin and Server Preferences to function.
If anyone could tell me which services are absolutely necessary for Server Admin to function, or at least where to start looking, I'd be immensely grateful. I didn't yet go on site to try and wrestle the whole thing from there, as the travel costs are non-trivial, so I'd rather do it remotely, if at all possible.

This is exactly the difficulty I am having with a 10.5.4 Intel xserve. I have established a VPN connection that connects me to my business LAN, and I know it has carried out the connection because there are a number of things I can access properly that are not available on the public internet. For instance, my LOM ports are restricted to my business LAN, and when I connect to the server via VPN I can access teh LOM ports and using server monitor. However, when I try to use Server Admin, nothing works. It won't connect. I too am confused. All traffic to the xserve is allowed via the business LAN. I thought all traffic was supposed to be routed to the VPN server when connected via a VPN. If this is the case, shouldn't Server Admin work? When I go on site and connect my computer directly to the business LAN, I have no difficulty using Server Admin.

Problem: Cannot send mail unless Password is transmitted insecurely & Port is set to 587.. Can receive mail but can't send..

Problem: Cannot send mail unless Password is transmitted insecurely & Port is set to 587.. Can receive mail but can't send Code 501..
Need help with T-bird.. My OS is Win XP-64..Have been using Mozilla for about 10 years with little or no problems.. This happened when I upgraded to 3.17.. Spent hours on T-Bird diagnostics web site.. Called Comcast & talked to a net tech.. he ran some tests on his end & had me log into my Comcast e-mail account & all worked well,, so he concluded the problem was in T-Bird.. He had me change my port to 587 & disable connection security & authentication to none & I was able to send mail.. That was all he could do.. Comcast was working.. the problem is in T-Bird.. Can any one help with this problem.. I don't want to send mail with my password transmitted insecurely..
Thanks
Richard

It was not intended to be "snide". You said two separate things that at face value would be out of the ordinary.
I considered if it might be a typo for 31.7. Since 31.5 is the current formal release, I would have to thank you for volunteering to test a pre-release beta version. If it was truly 3.1.7 then it would appear that you have chosen, or have become stuck with a somewhat ancient version. In either case it's harder to reach out to you with any meaningful comments or advice. However I do watch various other sites and newsgroups and I don't see a clamour of distressed users, so it seems fair to suppose that this feature isn't actually broken in 31.7.
And you said XP 64. XP is obsolete and no longer supported and if there is a 64-bit version, then again you have set yourself apart from the mainstream.
I had a look at the comcast site and found some puzzling recommendations. Some users come here asking how to set up a secured connection in Thunderbird when it isn't offered by the server. Comcast are different, in that they mention the ports 143 and 587, and also 993 and 465. So far so good, in that security is actually on offer, but they also suggest that you enable SSL, regardless of which port is being used. It would be unusual and unconventional to offer TLS or SSL on ports 143 and 587. STARTTLS would be more credible on these ports.
Have you tried IMAP on 993 and SMTP on 465? SMTP on 587 with SSL, or TLS, is not impossible, but is improbable.

No access via webinterface possible

hey,
i'm working with oracle 11g for a few weeks now. But now i have a problem and need some help.
Yesterday, i deleted the database and created a new one. afterwards i configured the listener. during the listener configuration i recieved a port error (standard port is used by another application). i told oracle to go on because i thought the error ocured because of another application in the background, but i was wrong.
now i am not able to access the oracle webinterface. but i'm able to access via sql developer.
who can help me to get webaccess again?
cu and thx
itchy2

yes the instance is ccrfinal.
i will translate it as good as possible:
C:\Documents and Settings\dufdmz>lsnrctl
LSNRCTL for 32-bit Windows: Version 11.2.0.1.0 - Production on 01-JUL-2010 16:00
:48
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Willkommen in LSNRCTL. Geben Sie "help" ein, um Information zu erhalten.
LSNRCTL> status
Sign in on (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=DEBONWNC6010890.dp-itsol
utions.de)(PORT=1521)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 11.2.0.1.0 - Production
Beginning date 30-JUN-2010 18:57:17
Uptime 0 Tage 21 Std. 3 Min. 35 Sek.
Trace-level off
security ON: Local OS Authentication
SNMP OFF
Parameter file of the listener C:\app\team\product\11.2.0\dbhome_2\network\admin\listener.ora
Log-File of the Listener c:\app\team\diag\tnslsnr\DEBONWNC6010890\listener\alert\log.xml
Summary/Conlusion of the listening endpoints
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=DEBONWNC6010890.dp-itsolutions.de)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=DEBONWNC6010890.dp-itsolutions.de)(PORT=9090))(Presentation=HTTP)(Session=RAW))
Service Overview
Service "CCRfinal" has 2 instances
Instance "CCRfinal", Status UNKNOWN, has 1 Handler for this service
Instance "ccrfinal", Status READY, has 1 Handler for this service...
Service "CCRfinalXDB" has 1 Instance.
Instance "ccrfinal", Status READY, has 1 Handler for this service...
Service "CLRExtProc" has 1 Instance.
Instance "CLRExtProc", Status UNKNOWN, has 1 Handler for this service...
The command has been executed successfully
LSNRCTL>
I tried to change the port of the http listener before to 9090 but there was no possibility to get access to the webinterface.

Disable access via insecure port 7001

Similar Messages

Maybe you are looking for