|
Chensak,
If you have configured your firewall correctly,
i.e. specified information about all your internal networks,
during configuration, then you will be protected from IP Spoofing
attacks.
Setting up a gxd between an Oracle Web Server and an Oracle Database
is completely separate.
Can you clarify your question?
Sarah
|
| I'm not sure what you (or your customer) is worried about, but I think the
answer is no.
As far as the client is concerned, the only thing it knows about is the firewall
- it thinks that's the server. As far as the server is concerned, the only
thing it knows about is the firewall - it thinks that's the client.
Gxd does NOT spoof the server in the way that telnetxd and ftpxd do when working
in transparent mode.
The anti IP-spoofing filters on the firewall are still in effect, checking all
arriving packets to ensure they arrived on the correct side of the firewall.
I hope these thoughts answer the question - each one is relevant to a different
possible issue. If they don't, then I'm afraid you'll have to clarify the
concern.
T
|
| Thank you for your answer. So far ,I know that our firewall has the
feature "IP Spoofing protection" but I have no idea what I should
provide the information to the customer (he's an experienced
consultant), I will tell him this information.
chensak
Internet Sales Support
|