How prevent REMOTE LISTENER register on SCAN LISTENER

Question

Hi All,
Oracle Database 11.2.0.3
How prevent remote registration on SCAN Listener?
I need to know if there is a way of prevent one instance register on listener using remote_listener parameter without affect incoming connection of client.
These parameter below is not enough to meet my tests:
tcp.validnode_checking = YES
tcp.excluded_nodes = {list of IP addresses}
tcp.invited_nodes = {list of IP addresses}The tcp.excluded_nodes and tcp.invited_nodes parameters deny and enable specific client IP addresses from making connections to the Oracle listener.
Levi Pereira

Answer 1

Yes, I posted about that 4 days ago:
Re: Local Listener Validity in 11gR2
I have not yet had an opportunity test it, have you successfully tested the procedures? Basically it forces all registration event to occur over IPC/TCPS. I have seen the original test case for this, and while yes, it is true that you can connect if this is not in place, it is a very complex man-in-the-middle vulnerability requiring access to your [hopefully firewalled] database server.