allowing ODBC access to an external Oracle DB

Answered allowing ODBC access to an external Oracle DB

  • Friday, October 12, 2012 11:57 PM
     
     

    Hi, we need to get access to an external Oracle DB using ODBC from our Internal Network. We have MS TMG 2010 with SP2. I created an OutBound protocol definition for TCP 1521 and add that protocol to the access rule used for our internal clients (firewall clients).

    However, we cannot get communication from our internal apps that use the ODBC connection. For example SQL Developer. I tried the same connection configurations from a machine outside TMG and they worked, so I am sure the problem is on the TMG.

    I logged the traffic in the TMG and I can see that there are no errors but a few seconds after starting the connection I see a message in the logs saying " A connection was abortively closed after one of the peers sent an RST packet. "

    Any ideas would be much appreciated.

    Xavier Villafuerte


    Xavier Villafuerte - http://preempalverec.blogspot.com

All Replies

  • Saturday, October 13, 2012 9:48 AM
     
     

    Hi,

    does the connection work when the client is a SecureNAT client? (You may have to change the Firewall Policy rule to apply to "all users")


    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

  • Saturday, October 13, 2012 6:47 PM
     
     
    No, it doesn´t. I used the traffic simulator in TMG and it said that the traffic is allowed but there is a message saying that firewall traffic could be blocked by application and web filters. I used Telnet to monitor this traffic and after typing telnet oracleIP 1521 the screen goes black and after a seconds it returns to the prompt. The TMG shows that there is no error in the traffic from the client but no answer is shown in port 1521.

    Xavier Villafuerte - http://preempalverec.blogspot.com

  • Monday, October 15, 2012 10:33 PM
     
     

    A quick update on this. I am seeing a lot of traffic from the external Oracle with the following message:

    "A non-SYN packet was dropped because it was sent by a source that does not have an established connection with the Forefront TMG computer"

    Ideas?


    Xavier Villafuerte - http://preempalverec.blogspot.com

  • Tuesday, October 16, 2012 8:38 AM
    Moderator
     
     Answered

    Hi,

    Thank you for the post.

    Please ensure the default gateway of internal client is pointed to the TMG internal interface. And also check if there is any other port should be open to connect ODBC?

    Regards,


    Nick Gu - MSFT