Page Access via IP Address

Hi,
Can anyone help. We have an Intranet site which we are going to allow access to a group of external users by allowing certain IP addresses through our firewall. There are some pages on our site that we don't want them to have access to. If I don't' display those pages to the public (ie our own staff) then only logged in users will be able to see them. This is not feasible as we have 10,000 plus staff and we don't have the resources to issue/maintain that many accounts.
Does anyone know of a way of not allowing certain IP addresses to have access to a page or group of pages?

Bill,
Using IP address as a method of enforcing a security protocol is frankly a very dangerous thing to do. Simply because it is far to easy to spoof the appropriate header. It was for this reason that we specifically did not allow for this in the product. Our secured inside/outside model is based on the definition of a "unsecured" server which indicates to the Portal where the request was coming from. A white paper available on OTN discusses this topology.
http://www.oracle.com/technology/products/ias/portal/pdf/PS_S745_273745_106-1_FIN_v2.pdf
However in your case it sounds like you will be allowing the external users direct access to the Intranet. IP spoofing aside the issue you will run into is that a "Public" page does not implement any security checks (as you defined it as public) hence there is no check point in order to test the IP address. Security would only be implemented with authenticated pages (which you could implement globally using the AUTHENTICATED_USERS group). The use of the self registration feature may allow you to decrease the load by getting the users to create their own accounts for the page.
One solution (again recommend not using simply the IP address) would be using an authententicating gateway (such as COREid Webgate) which could implement the appropriate policy and either block the URL or forward it accordingly. This solution would be transparent to the portal itself as the external requests would be blocked prior to hitting the application server.

Similar Messages

Restricting access via MAC address?

Hello,
Could someone please tell me how to restrict access to my wireless network (and internet sharing) by only allowing computers with a certain MAC address to join?
I'm kinda stumbling around here
Thanks,
Jonny

Sorry if I wasn't being specific enough...
I have my eMac set up as a Software Base Station, which streams internet & Airtunes to an Airport Express. I have it set up this way, because my ADSL modem is connected via USB (so it's a bit of a workaround). As a result, I have Internet Sharing switched on, so I can access it from all my other macs.
What I want to do is to stop other people from accessing my eMac's internet connection. If I set up a WEP password for Internet Sharing, I lose my Airtunes facility... so I was thinking another way might be to restrict access to the connection via MAC address. I only want my other airport card-equipped macs to access the internet connection and network generally.
Surely it's possible?

Portal URL: Why cannot access via IP address?

When I try to access portal web with IP address, the tree navigation in browse area always shows blank or keep show "loading...".
But after I access the same URL but change it to domain name address, the tree navigation shows correctly.
Could you please explain what is the setting behind this?
Why in some environment we can access directly from IP address?
Thanks !

Hi Erika
you need to update your host file with your EP server host name and IP address
this host file is present in c:/windows/system32/drivers/etc/hosts
open this host file with notepad
and at the bottom give the values like this
<IP address of your EP Server> <EP Server Host Name>
Note:: you need to provide this settings under EP server host--c:/windows/system32/drivers/etc/hosts
Rgds
Srinivas

Cannot access page groups via Navigator "portlet could not be contacted"

On the Portal Navigator's Page Groups tab, the error "The portlet could not be contacted." appears where the list of Page Groups should be.
This is happening for 2 users. I see it the error in 1 browser, but not in another (logged on in both browser as same user).
There are no errors in the Apache error log. There are errors in the OC4J_Portal application log:
07/01/26 14:32:05 portal: id=673911615591,2 ContentFetcher Unexpected Exception Request Failed:oracle.webdb.dispatcher.DispatcherException: I/O Error dispatching request name=content-fetcher0 label=dbPortlet url=http://portal.domain.com:7823/pls/portal/!PORTAL.wwpro_app_provider.execute_portlet/771029724/15 time=949ms timeout=15000ms process=Redirecting
07/01/26 14:32:05 portal: [perf] 199.64.107.21 http://portal.domain.com:7823/pls/portal/!PORTAL.wwpro_app_provider.execute_portlet/771029724/15 id=673911615591,2 type=dbPortlet name=ORACLE+PORTAL,6_500169_6_3_23 status=(null) user=E032034 subscriberID=1 reqTime=949ms waitTime=0ms cache=(null) timeout=No redirects=0 bytes=0 authLevel=10 webCacheStatus=(null) webCacheExpires=(null) webCacheAge=(null) csConv=No readTime=No,0ms pageTimeout=No procTime=0ms
07/01/26 14:32:05 portal: [perf] 199.64.107.21 http://portal.domain.com:7823/pls/portal/!PORTAL.wwpob_page.show?_pageid=6,3,6_23 id=673911615591,2 type=pageMeta name=6,3,6_23 status=200 user=E032034 subscriberID=1 reqTime=90ms waitTime=0ms cache=MISS,NEW timeout=No redirects=0 bytes=19652 authLevel=10 webCacheStatus=MISS,STALE [G] webCacheExpires=86400 webCacheAge=0 csConv=No readTime=No,0ms pageTimeout=No procTime=90ms
07/01/26 14:32:05 portal: [perf] 199.64.107.21 http://portal.domain.com/portal/page?_pageid=6,3,6_23&_dad=portal&_schema=PORTAL id=673911615591,2 type=page name=6,3,6_23 status=200 user=E032034 subscriberID=1 reqTime=1039ms waitTime=0ms cache=(null) timeout=No redirects=0 bytes=16878 authLevel=10 webCacheStatus=(null) webCacheExpires=(null) webCacheAge=(null) csConv=No readTime=No,0ms pageTimeout=No procTime=0ms
I placed the log in debug mode and got the error below:
07/01/26 18:54:20 portal: DEBUG: active=26 id=8817185720131,2 Content Fetcher Caught Dispatcher Exception :
oracle.webdb.utils.PortalExceptionImpl: I/O Error dispatching request
     at oracle.portal.PortalException.<init>(Unknown Source)
     at oracle.webdb.dispatcher.DispatcherException.<init>(Unknown Source)
     at oracle.webdb.dispatcher.HTTPDispatcher.dispatch(Unknown Source)
     at oracle.webdb.dispatcher.CacheDispatcher.dispatch(Unknown Source)
     at oracle.webdb.page.ContentFetcher.run(Unknown Source)
Caused by: java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
     at java.net.Socket.connect(Socket.java:452)
     at java.net.Socket.connect(Socket.java:402)
     at java.net.Socket.<init>(Socket.java:309)
     at java.net.Socket.<init>(Socket.java:153)
     at HTTPClient.HTTPConnection$EstablishConnection.run(HTTPConnection.java:3938)
caused by: java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
     at java.net.Socket.connect(Socket.java:452)
     at java.net.Socket.connect(Socket.java:402)
     at java.net.Socket.<init>(Socket.java:309)
     at java.net.Socket.<init>(Socket.java:153)
     at HTTPClient.HTTPConnection$EstablishConnection.run(HTTPConnection.java:3938)
What is confusing is how 1 browser gets the error but another does not.
Any suggestions?
TIA

This issue seems to be related to the specific URL used to access the Navigator. I was using a specific URL to display a particular page region for editing, namely
/portal/page?_pageid=6,3,6_23&_dad=portal&_schema=PORTAL&p_otype=FOLDER&p_octx=FOLDER.334478_1453&p_domain=wwc&p_sub_domain=SITEEXP
Once the Navigator is accessed via this URL, all subsequent attempts to access Page Groups Navigator portlet fail.
I changed my process to not use the URL above.

Network camera access via airport extreme ie: i need to assign a port and a

please help me i have a cabin in the mountains that is off the grid... and i use solar power... i have my internet access via wifi and an antenna... it goes to a d-link router in my electric room then from there via a cat 5 cable to a apple airport extreme base station... and i would like to plug the camera into the base station via a cat 5 cable....
i am trying to set up a network camera to via a airport extreme base station.... the tech support on the camera end (airlink 101 skyIP cam500 model aicn500) said to enable port 80 and to assign a IP address (which i have)... apple support has been unable to help me after almost 1 hour with tech support.... here is what the camera tech support page suggests....
You will now need to forward the Second HTTP Port through your router to the IP address of the camera. If you have an AirLink101 router, we have instructions in our knowledge base for port forwarding. If you have a router from another company, you will need to contact them for instructions on port forwarding.
When accessing the camera from a remote location you will need to open a browser and type in the internet IP address of your network (not the ip address of the camera) and the port into a web browser. The address and port will need to be typed in like this:
http://x.x.x.x:port
x.x.x.x = Internet IP address
port = Second HTTP Port
Here is an example of what it would look like: http://123.123.123.123:81
can anyone please help me?

i can not thank you enough for taking the time time to help me!!! i really appreciate it.... i have done the set up with the d link router and am now trying to access the camera from the web.... but i am having trouble logging in and finding it? i am not sure what ip address to enter into my web browser? i think that i need to add the ip addresss folllowed by a forward slash and then the port # 80.... but what ip address should i add? in the device info part of the d link router i have found a number of ip address's... but none of them seem to work? what am i doing wrong? or not doing? my apple base station is set up in the bridge mode with a password to protect it...
thanks again...
josh

RDP Client access via QuickVPN Connection

HI everyone,
recently I purchase a Wireless-RV 220W Router/Firewall and it work very good.
My requirement now is to use the Remote Desktop Connection client on the network where the Cisco device is installed.
I can connect via QuickVPN without problems, but when I try to establish a Remote Desktop Connection to a network client, nothing happens.
Also, I can not connect to the page of manage, for example, a NAS on the same network.
The current configuration of the network where iIt is installed please the cisco is:
IP range: 192.162.0.x / 24
The PC on which I installed QuickVPN has instead 192.168.1.x/24 address.
I have read on the net that you probably need to create a rule to the firewall client software to which I want to access via RDP, but I prefer to ask you experts what is the procedure that I have taken.
Thank you.

Please, someone help me! I still try to open port on windows client firewall but still don't work...
Thanks

Remote TC access via port forwarding

I have been trying to setup my network for remote TC access via port forwarding. Here's my setup:
Verizon FiOS router (main router, dhcp & nat) -> connected to TC set in bridge mode with a static IP
I can remotely access the TC using Back to my Mac with no problems, and of course locally on the home network via Wifi.
Since the TC has to connect in bridge mode, port forwarding is done on the FiOS router.
If I set a port forwarding rule in the FiOS router TCP,UDP (any) to port 548, it works. However I want to use a specific connection port
so others can't connect unless they know the forwarded port. BTW, I have remote disk sharing set with Use Device Password.
So here's what works:
FiOS Router (TCP any -> 548, UDP any ->548)
What doesn't work:
FiOS router (TCP 8990 -> 548, UDP 8990 -> 548).
Is there any additional setting required for specific port forwarding to work?

You're my hero!
I also have my TC in Bridge Mode to my Verizon FIOS Router. I used to be able to access my TC remotely, but since I upgraded my router (MI424WR GigE), I had forgotten some port forwarding rules I must have established in my old router. Once I re-created these two port forwarding rules (just like yours), I can remote access my TC (with TC password) again.
In addition, I have a static host name aliased to my dynamic IP address through dyndns.org (I have the free version, which I don't think is available anymore, but there are other free providers out there) for easier remote access.
Regarding, Secure Share Disks: with TC password vs a disk password. Is one more secure than the other?
Thanks!

No access via webinterface possible

hey,
i'm working with oracle 11g for a few weeks now. But now i have a problem and need some help.
Yesterday, i deleted the database and created a new one. afterwards i configured the listener. during the listener configuration i recieved a port error (standard port is used by another application). i told oracle to go on because i thought the error ocured because of another application in the background, but i was wrong.
now i am not able to access the oracle webinterface. but i'm able to access via sql developer.
who can help me to get webaccess again?
cu and thx
itchy2

yes the instance is ccrfinal.
i will translate it as good as possible:
C:\Documents and Settings\dufdmz>lsnrctl
LSNRCTL for 32-bit Windows: Version 11.2.0.1.0 - Production on 01-JUL-2010 16:00
:48
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Willkommen in LSNRCTL. Geben Sie "help" ein, um Information zu erhalten.
LSNRCTL> status
Sign in on (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=DEBONWNC6010890.dp-itsol
utions.de)(PORT=1521)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 11.2.0.1.0 - Production
Beginning date 30-JUN-2010 18:57:17
Uptime 0 Tage 21 Std. 3 Min. 35 Sek.
Trace-level off
security ON: Local OS Authentication
SNMP OFF
Parameter file of the listener C:\app\team\product\11.2.0\dbhome_2\network\admin\listener.ora
Log-File of the Listener c:\app\team\diag\tnslsnr\DEBONWNC6010890\listener\alert\log.xml
Summary/Conlusion of the listening endpoints
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=DEBONWNC6010890.dp-itsolutions.de)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=DEBONWNC6010890.dp-itsolutions.de)(PORT=9090))(Presentation=HTTP)(Session=RAW))
Service Overview
Service "CCRfinal" has 2 instances
Instance "CCRfinal", Status UNKNOWN, has 1 Handler for this service
Instance "ccrfinal", Status READY, has 1 Handler for this service...
Service "CCRfinalXDB" has 1 Instance.
Instance "ccrfinal", Status READY, has 1 Handler for this service...
Service "CLRExtProc" has 1 Instance.
Instance "CLRExtProc", Status UNKNOWN, has 1 Handler for this service...
The command has been executed successfully
LSNRCTL>
I tried to change the port of the http listener before to 9090 but there was no possibility to get access to the webinterface.

Access violation at address 6761D581 in module 'ORA805.dll'.

hi Gurus,
When ever I try to connect the database through toad , I got this error 'Access violation at address 6761D581 in module 'ORA805.dll'. Read of address 00000010'. Please help me to resolve this issue.
Oracle database: 10.2.0.1.0
Oracle client: oracle froms 6i (sql 8.0.6.0.0)
toad: 10.5.0.41
Thanks in advance
Sadiq

Toad Advisor shows
Warnings
1- Incompatible Client and Server
Client version (8.0.6.0.0) and server version (8.0.0.0) should not be used together according to metalink note 207313.1.
Incorrect NLS_LANG
2-
NLS_LANG is AMERICAN_AMERICA.WE8ISO8859P1. Expected WE8MSWIN1252 (AMERICAN_AMERICA.WE8MSWIN1252) for Code Page 1252, Language ID 1033 (English (United States))

How to float a landing page to capture email address, only shown once per visitor to the site, and not on return visits?

I would like to float a landing page to capture email addresses, that is only shown once per visitor to the site, and not on return visits OR after they submit their email not to be asked again.
thanks guys!

Hi Scott,
Thanks a lot for the advice.
Actually I added user names to the apex_access_control table and assigned each user the desired privilege but did not notice that I should do the following setting.
*Access Control Administration > [RUN] > Set Application Mode: Restricted access.*
Thanks,
Guy

Is it possible to trace unauthorized users? (via ip address or terminal id)

Hi friends
I was wondering if you can help me out with our Logon Securities predicament: We have set up some generic apps ids that are only known to a handful of users. Regular but unauthorized users are trying to sign-on using these generic ids by guessing the password and end up locking them when they exceed sign-on attempts. Is it possible to trace these unauthorized users? (via ip address or terminal id?) (We are on 11.5.10)
Thanks in advance
Ankur

We look at the time of the failure from the fnd_unsuccessful_logins and then correlate it with the AppsLocalLogin.jsp entries in the apache access logs. The ip address is in the access_log.
If you have a lot of logon failures combined with a lot of logons it may be tough to find the offending users but it might help you. Most of our users connect via SSO so finding our offenders are relatively easy. Very few users logon with AppsLocalLogin in our environment.
Edited by: mcharchu on Feb 5, 2009 9:24 PM
Edited by: mcharchu on Feb 5, 2009 9:25 PM

TS3276 Accessing Gmail suddenly stopped working on both my Powerbook pro running latest OS and Mail versions and on my iPhone. I can access via the web. I get the error that my password or username is incorrect. I reset my password in Gmail and confirmed

Accessing Gmail suddenly stopped working on both my Powerbook pro running latest OS and Mail versions and on my iPhone. I can access via the web. I get the error that my password or username is incorrect. I reset my password in Gmail and confirmed it works on gmail, I then changed it on my Iphone and Mac Mail. It still does not work. I deleted the gamil account on mail on my mac and reinstalled it and it still will not work

I too started having my password rejected in MAIL.app for imap.mail.me.com for my icloud email address. Can login to icloud with web browser fine. This has been happening off and on for several days.....if I wait 2-3 hours it will suddenly start working again, but then problem re-asserts itself ;-)

TC with Access via User Accounts

Hi all folks,
I start using a new TC (2TB with 7.5.1) with access via User Accounts switched on, but it confuses me a little. In general I'm interesting in storing some more data to the TC, also I'm interesting in using seperate folder/mountpoints.
I add some User Accounts (I used the short names from my Mac, for example lutz, test, work, gast and admin) and every User can logon/connect to the TC, with a User Folder and a "Data" Folder, but admin can't connect to the User Folder.
All the time I try to logon/connect with the admin User, I can mount the "Data" Folder, but I can't mount the "admin" Folder (but the folder is shown).
In the Mac Syslog I find,
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder[111]:
NetworkNode::handleMountCallBack returned -6602
I got a box with,
The operation cannot be completed because the original item for "admin" cannot be found.
And in the TC Syslog I find,
Syslog Protocol 6 - All Information
Nov 18 00:16:54 Gewichtung: 5 AFP login OK from [email protected].
Nov 18 00:16:57 Gewichtung: 5 AFP session from [email protected] closing.
Nov 18 00:16:58 Gewichtung: 5 AFP login OK from [email protected].
Nov 18 00:18:03 Gewichtung: 3 No Address for NTP server time.euro.apple.com.
I got folders like this, "lutz" and "Data" and both are empty.
From the admin Point of view the "Data" Folder looks like this and the "admin" folder can't connect too.
"Data"
"Data/Shared"
"Data/Users"
"Data/Users/lutz"
"Data/Users/test"
"Data/Users/gast"
"Data/Users/work"
"Data/MacBook.sparesbundle"
"Data/PowerBook.sparesbundle"
My question, is "admin" an TC internal User too?
What's the reason I can't mount the "admin" Folder and why I got a complete view to the TC filesystem with the "admin" User only?
It's nice to see this, but what's the reason!
How to add some more Shared folder for data exchange?!
Any idea what's happend,
thanks for any help, I can't find any information about this behavior,
Lutz
p.s.
The password from the User Account definitions are ignored for the "admin" user, the TC Password is used all the time.
p.s.
I read "http://web.me.com/pondini/Time_Machine/FAQ.html", too.

Hi all folks,
anyone who spend some time to add an User Account named "admin" to a TC and try to logon/connect to the TC with this user.
If someone try to do this, don't use the same password for "admin" and the TC itself, but try to logon/connect with "admin" to the TC with the defined passwords, both. I can connect "admin" to the TC with the TC password only, not with the password defined via User Account.
Thanks for any help,
Lutz

WLC 5508 Cant get access via the Mgmt Interface

Hello everybody,
i have a wlc 5508 (version 7.0.98.0) , if i'm pinging the service port interface or try to get access via this interface, everythings is fine, but if cant get access via the management interface. (but its pingable)
the crazy thing is, that the LAP joined successful ti the wlc, but the Upgradetool (converting an AP to an LAP) doesnt work, because the tool cant reach the mgmt interface of the wlc.
there are no ACLs, which are blocking the traffic between wlc and my computer
Does anyone has an idea, what i've configured wrong???
regrads,
Rocco

Interface Name                   Port Vlan Id IP Address      Type    Ap Mgr Guest
wlan1                                   1    16       172.16.2.10      Dynamic No     No
management                         1    2        172.16.1.10      Static     Yes    No
wlan2                                   1    220      172.16.3.10   Dynamic No     No
service-port                        N/A N/A      10.75.100.99      Static     No     No
virtual                                N/A N/A      1.1.1.1               Static     No     No
and my Pc is in the 172.16.4 subnet
i have no access to the switch port, where the controller is connected to, but i know that this port permits access to the vlans which are used

Cisco 1262 AP cannot access via cosole and GUI

Hi,
I have a Cisco AIR-LAP1262N-E-9 but I cannot access via console and GUI. Also, I noticed that after getting IP address from DHCP server, its IP address will be released after 2minutes. Then after a while, the access point will get another new IP address. And this happens repeatedly.
Hoping for some help out there...
Thanks,
shawn

Hi Manas,
Thanks for your comments.
I have a WLC 5508 controller. I just want to have a basic setup for my upcoming project implementation. On my test bed, I have WLC, 2 sets of AP, and PoE L3 switch. The L3 switch serves as a DHCP server to APs. I manually set the Management Interface IP address of WLC in the same VLAN of the DHCP scope for AP just for basic connectivity. Upon powering up the APs, the WLC detected the APs. However, after 2-3 minutes, the WLC cannot detect anymore the APs. I also notice that the APs are getting their IP address to DHCP server but it will release after sometime..may about 3minutes. Then the APs will get again IP address and will release it. And this happens continuously. I just wish to hard code the IP settings to APs via console but I cannot access it.
Hoping for your help and thanks in advance.
Regards,
Shawn

Page Access via IP Address

Similar Messages

Maybe you are looking for