SQL firewall rule to restrict traffic from only one Azure PaaS website (cross-post from websites)

(This has also been posted on the websites forum)
Hi,
I have been asked to configure the firewall on the SQL PaaS instance to only allow traffic from a specified PaaS website that is within the same subscription. I can't see any way to set a static internal IP for the website, is there a way to identify it
for the purpose of the SQL Database firewall rule?
Thanks,
Karina

You're right, KG! Sorry.
This article mentions a reserved-IP:
https://msdn.microsoft.com/en-us/library/azure/dn690120.aspx
It specifically mentions your scenario:
You want to ensure that outbound traffic from Azure uses a predictable IP address. You may have your firewall configured to allow only traffic from specific IP addresses. By reserving a VIP, you will know the source IP address and won’t
have to update your firewall rules due to a VIP change. This is especially helpful if you want to configure your firewall before you create your cloud service.
The only thing I'm not confident on would be if it works with Azure Websites - it does mention cloud services, though. If you have further questions, I can give a shot myself and see if I can get a working example.

Similar Messages

SQL firewall rule to restrict traffic from only one Azure PaaS website

Hi,
I have been asked to configure the firewall on the SQL PaaS instance to only allow traffic from a specified PaaS website that is within the same subscription. I can't see any way to set a static internal IP for the website, is there a way to identify it
for the purpose of the SQL Database firewall rule?
Thanks,
Karina

Hi Karina,
If you used Azure Vm, you could set ta static internal IP for your VM. And you can host your website on VM.https://msdn.microsoft.com/en-us/library/azure/dn630228.aspx
But for Azure Website service, I think you may not set the internal IP. But I think you can try to add the website server into your allow rule list if you used the basic or standard mode website.
BTW, I suggest you can post this issue on SQL Azure forum for more helps:
https://social.msdn.microsoft.com/forums/azure/en-US/home?forum=ssdsgetstarted
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Why can I copy music to my iPad or iPod touch from multiple computers but from only one computer using my iPhone?

Why can I copy music to my iPad or iPod touch from multiple computers but from only one computer using my iPhone?
IPads and iPod Touches don't seem to have the same media copying restriction that my iPhone has. My main computer is at home. I have music at home and at work and sometimes I like to add it to my iPhone from work. I can do this no problem using my iPad or my iPod touch, but when it comes to my iPhone, I can only copy music to it from my main computer.
Why would the iPhone have this restriction but not the other two devices?
ps. Where's my "add currently playing song to playlist" button? I can't even find a third-party music app with this feature.

Because...!
I've no idea why either.
Although it isn't normally possible to sync an iPod/iPad/iPhone with two computers (or manually manage an iPhone from more than one) it can be achieved if all computers have copies of the self same library. See Re: how do i sync on a second laptop without the data on my iPhone 5 being erased?
tt2

In my iPad mini if I use earphones I can hear from only one side

In my iPad mini if I use earphones I can hear from only one side but the earphones work fine with other devices

Have you tried different headphones in your iPad mini?
Check in Settings > General > Accessibility if little slider half way down isn't moved to either side towards "L" or "R".
If it isn't , try to reboot the device, but it's likely that your audio port isn't working correctly. If so, it should definitely be covered by warranty.

Why does my iphone send all text from only one of my contacts to my email?

Why does my iphone send all text from only one of my contacts to my email? I'm curious to know if anyone else has had this issue with the Iphone 5s...

imessage has a new setting that shows all emails associated with your apple id. There are two sections, send and receive. Since you are using the same apple id, Im sure if you adjust one of those settings to your mobile number instead of your appleid, it wont send double.
You might also have to adjust your wifes settings too, so those emails dont overlap

We have 2 iphones both synched to 1 ipad how do we reovw phone numbers from only one of the phones

We have 2 iphones and they are both synched to an ipad, how do we reomve phone numbers from only one of the phones without hte numbers being removed from the other phone

one can't sync iPhones with ipads
best you can do is to sync all with iclouds
if you do so and wish to stop syncing contacts with one of the iPhones you have set it not to sync contacts in the settings of the iPhone

How can I buy only one month service of indesign cc from online shop?

How can I buy only one month service of indesign cc from online shop? it seems only allow to buy one year package service. PLA HELP !

http://www.adobe.com/products/catalog/software._sl_id-contentfilter_sl_catalog_sl_software _sl_allsoftware.html#
Click on Join, then from plan select: Month to month

Ipod classic sound from only one channel

My 80GB Ipod classic has sound from only one headphone. Same problem when docked so it's not a headphone or socket problem. It's as if only one channel is working. Any ideas?

Did you check System Preferences>Sound to make certain that the balance scroll section was in the middle?
Clinton

Access oracle forms from only one computer

Hi,
We have an ERP software which is created by using Oracle Forms 4.5. We want to give an access to user to use the specified screen of our ERP program from only one computer. Apart from that no one should access the screen from any computer.
Is it possible to do that?
thanks

Upgrade all clients to Windows 7, and leave one with windows 2000 in place. The windows 7 clients most certainly won't be able to run a forms 4.5 application ;)
Why would you want to limit it to one computer? Isn't that what user accounts are for? Or are all users using the same account? You could of course check for the hostname of the client connected to the database:
CHE_TEST@tcp_asterix_impl> select sys_context('userenv', 'host') from dual;
SYS_CONTEXT('USERENV','HOST')
LINZ\CHE-WSBut this is not a very safe method, as I could boot a virtual machine with NAT so I don't get a name resolution conflict, name it like your machine and connect to the database. User accounts are protected by passwords, if I don't know the password I can't connect to the application (at least it's a little bit harder to hack a password then a hostname ;) )
cheers

Strange problem with ORA-12154 from only one client

Hi all,
I have a strange problem.
I have three 11.2.0.1 databases on three different hosts.
For simplicity lets say:
Host1: database ovm1a
Host2: database ovm7a
Host3: database ovm8a
I have a database schema in all three databases named EHJ. In all three databases, there are fixed user
database links to the other databases. So EHJ in ovm1a has two links, one to ovm7a and one to ovm8a. The EHJ schema in ovm7a has two fixed user links to the EHJ schema in the ovm1a and ovm8a databases. And the same is true for the EHJ schema in the third database, ovm8a.
If I log into the EHJ schema for each of the three databases, I can successfully select over the database links. I've been using the SQL statement: select count(*) from user_users@dblink_name;
For each of the two links in each of the three databases, the query returns 1 so I know the database links are working properly and I have my networking setup properly.
Now, here is the weirdness.
I have an Oracle Application Server where our Oracle Forms and Reports run. The Oracle client on this install is 10.1.0.5. I've got a tnsnames.ora file setup on this Oracle App server to connect to all three databases ovm1a, ovm7a and ovm8a. I can successfully use the 10.2.0.5 client SQL*PLUS to connect to the EHJ schema in the ovms1, ovms7 and ovms8 databases.
However, (and only when) connected to the ovm1a database from this client, attempts to select over the link throw the famous error: ORA-12154: TNS:could not resolve the connect identifier specified
This error happens with both links in the ovm1a database when connected via this one client.
BUT, if I connect using the same 10.1.0.5 client to the EHJ schema in the ovm7a or ovm8a databases, the database links in those two databases are working just fine.
I'm pulling my hair out trying to figure this out.
I've tried using SQL*PLUS from my desktop machine (10g R2 client) connecting to the EHJ schema on all three databases and the db links all work fine.
Any help in trying to troubleshoot this would be greatly appreciated.
Cheers

JSebastian wrote:
I have an Oracle Application Server where our Oracle Forms and Reports run. The Oracle client on this install is 10.1.0.5. I've got a tnsnames.ora file setup on this Oracle App server to connect to all three databases ovm1a, ovm7a and ovm8a.But the client (and tnsnames.ora) in question here is actually one (each) of the three databases, right? I.e. error is thrown by the db server, acting as client (db link side).
>
However, (and only when) connected to the ovm1a database from this client, attempts to select over the link throw the famous error: ORA-12154: TNS:could not resolve the connect identifier specified Connected how, as opposed to when you "successfully select..."?
This error happens with both links in the ovm1a database when connected via this one client.Does Oracle config files on ovma1 host differ from the other two db hosts?
Does
SQL> select property_name,property_value from database_properties
2 where property_name in ('GLOBAL_DB_NAME','NLS_RDBMS_VERSION');
SQL> select owner,db_link,host from dba_db_links;return as expected on all three db's?
I've tried using SQL*PLUS from my desktop machine (10g R2 client) connecting to the EHJ schema on all three databases and the db links all work fine.Make sure you are connecting to correct databases. (Simply, three tns aliases could all be pointing to the same database.)
Edited by: orafad on May 25, 2011 11:24 PM

Send and receive e-mails to/from only one mailbox

Hello,
i wanted to know is it possible to allow one recipient to send to only one recipient and to receive only e-mails from same recipient ?
Thanks,
John

Hi John,
Great commands from Philip.
We can also create transport rules via EMC.
Found a similar thread for your reference:
Transport Rule allow user to send to only 10 user
http://social.technet.microsoft.com/Forums/en-US/06d88574-d67d-483d-9abe-fe5e3f8bc41b/transport-rule-allow-user-to-send-to-only-10-user
Hope it is helpful
Thanks
Mavis
Mavis Huang
TechNet Community Support

SCAN LISTENER runs from only one node at a time from /etc/hosts !

Dear all ,
Recently I have to configure RAC in oracle 11g(r2) in AIX 6.1 . Since in this moment it is not possible to configure DNS, so I dont use SCAN ip into the DNS/GNS, I just add the SCAN ip into the host file like :
cat /etc/hosts
SCAN 172.17.0.22
Got the info from : http://www.freeoraclehelp.com/2011/12/scan-setup-for-oracle-11g-release211gr2.html#ORACLE11GR2RACINS
After configuring all the steps of RAC , Every services are ok except SCAN_LISTENER . This listener is up only one node at a time . First time when I chek it from node1 , it shows :
srvctl status scan_listener
SCAN listener LISTENER_SCAN1 is enabled
SCAN listener LISTENER_SCAN1 is running on node dcdbsvr1
now when I relocate it from node 2 using
"srvctl relocate scan -i 1-n DCDBSVR2" , then the output shows :
srvctl status scan_listener
SCAN listener LISTENER_SCAN1 is enabled
SCAN listener LISTENER_SCAN1 is running on node dcdbsvr2
Baring these , we have to try to relocate it from the node2 by the following way, then it shows the error :
srvctl relocate scan -i 2 -n DCDBSVR2
resource ora.scan2.vip does not exists
Now my question , How can I run the SCAN and SCAN_LISTENER both of the NODES ?
Here is my listener file (which is in the GRID home location) configuration :
Listener File OF NODE1 AND NODE 2:
==================================
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN1=ON
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER=ON
LISTENER_SCAN1 =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC) (KEY = LISTENER_SCAN1)
ADR_BASE_LISTENER_SCAN1 = /U01/APP/ORACLE
2)
Another issue , when I give the command : " ifconfig -a " , then it shows the SCAN ip either node1 or node2 . suppose if the SCAN ip is in the node1 , and then if I run the "relocate" command from node2 , the ip goes to the Node 2 . is it a correct situation ? advice plz ... ...
thx in advance .. ...
Edited by: shipon_97 on Jan 10, 2012 7:22 AM
Edited by: shipon_97 on Jan 10, 2012 7:31 AM

After configuring all the steps of RAC , Every services are ok except SCAN_LISTENER . This listener is up only one node at a time . First time when I chek it from node1 , it shows :If I am not wrong and after looking at the document you sent, you will be able to use only once scan in case you use /etc/host file and this will be up on only one node where you added this scan entry in /etc/hosts file.
Now my question , How can I run the SCAN and SCAN_LISTENER both of the NODES ?Probably you can't in your case, you might run only one i think and on one node only
srvctl status scan_listener
SCAN listener LISTENER_SCAN1 is enabled
SCAN listener LISTENER_SCAN1 is running on node dcdbsvr1
now when I relocate it from node 2 using
"srvctl relocate scan -i 1 -n DCDBSVR2" , then the output shows :
srvctl status scan_listener
SCAN listener LISTENER_SCAN1 is enabled
SCAN listener LISTENER_SCAN1 is running on node dcdbsvr2You moved scan listener from node 1 to node 2, OK
Baring these , we have to try to relocate it from the node2 by the following way, then it shows the error :
srvctl relocate scan -i 2 -n DCDBSVR2
resource ora.scan2.vip does not exists
--------------------------------------------------------------------------------Since you have only one scan, you can't relocate "2". So ise "1" instead here also
FYI
http://www.oracle.com/technetwork/database/clustering/overview/scan-129069.pdf
Salman

Can't connect to SMB share on Windows server from only ONE mac

I have over 20 macs on my network. All are running the same version of the OS. (10.4.9) Almost all of the macs can connect, using SMB, to our Windows 2000 file servers...but only ONE of them can not. When I try from that mac, I get the following error:
"The finder cannot complete the operation because some data in "smb://myservername" could not be read or written. (Error code -36)"
This same mac that has this issue can connect to any of our other Win2K file servers and all my other macs can connect to the server that this mac can't...which is very confusing for me because that tells me that the mac is fine and the Win2K server is fine as well...
Any ideas?

-36 is a bit generic, but usually means the Windows® machine is denying because of bad Password. Have you tried deleting that particular reference/share in Keychain Access and redoing it?

Load relationships from only one BP, from R/3 to CRM

Hello,
I have downloaded one BP from R/3 to CRM, but relationships (Employee responsible, Sales representative, Ship-to party, etc...) are not downloaded into this BP.
The individual employees, ship-to party, etc... already exist in CRM, but not appear as relationships into mentioned BP.
I created request with:
Adapter Object: CUSTOMER_REL
Objektklass:      BUPA
Table Name         KNVP
Field Name         KUNNR
Incl/Excl          I Inclusive defined set
Option             EQ Equality (= Low)
Low                'The R/3 customer number'
But when I start request this is downloading all relationships for all customers.
What I need add to the request or what I need to do in order to download only the relationships for only one specific BP (customer) ?
Regards
Juan

This is the request we run:
Request Name       REQ_CUST_REL
Table Name         <b>KNA1</b>
Field Name         KUNNR
Incl/Excl          I Inclusive defined set/array
Option             EQ Equality (= Low)
Low                0000144060
High

Audio coming from only one field

Hello,
I just did a mic'ed interview with my little camera. I was wearing headphones and noticed audio coming from only the left side, but there was nothing I could do about it that I was aware of.
Anyway, now that this thing is in Final Cut Express, is there anything I can do to apply the left track to the right track? Or would this make it sound funky or how does it work?
Thanks very much,
Jeremy

Ah, I see. I just used 'Pan' and set it from -1 to 0. Cool.
This can be deleted or left for reference, I don't care.

SQL firewall rule to restrict traffic from only one Azure PaaS website (cross-post from websites)

Similar Messages

Maybe you are looking for