如果想正常關(guān)閉,那么最好是:先手動斷開所有數(shù)據(jù)庫連接(外部鏈接,比如訪問等),關(guān)閉監(jiān)聽(防止再次產(chǎn)生外部鏈接),然后殺掉所有正在執(zhí)行的數(shù)據(jù)庫進(jìn)程(數(shù)據(jù)庫內(nèi)部的一些,比如正在執(zhí)行的執(zhí)行計劃等,主進(jìn)程別殺?。?,然后關(guān)閉外圍服務(wù),最后再用immediate關(guān)閉數(shù)據(jù)庫。這樣能快一些,而且相對而言數(shù)據(jù)庫會正常,不會因為斷開外部鏈接,等待進(jìn)程結(jié)束等問題等待時間超長。,當(dāng)然也只是快一些而已,如果數(shù)據(jù)庫很大,那么還是會很慢。
創(chuàng)新互聯(lián)堅持“要么做到,要么別承諾”的工作理念,服務(wù)領(lǐng)域包括:成都網(wǎng)站制作、網(wǎng)站設(shè)計、企業(yè)官網(wǎng)、英文網(wǎng)站、手機(jī)端網(wǎng)站、網(wǎng)站推廣等服務(wù),滿足客戶于互聯(lián)網(wǎng)時代的無為網(wǎng)站設(shè)計、移動媒體設(shè)計的需求,幫助企業(yè)找到有效的互聯(lián)網(wǎng)解決方案。努力成為您成熟可靠的網(wǎng)絡(luò)建設(shè)合作伙伴!
其他的shutdown abort,也是一個關(guān)閉數(shù)據(jù)庫的方法,不過oracle本身也不推薦,因為每次abort后數(shù)據(jù)庫可能會有這樣那樣的問題。
再baoli一些的,就是直接關(guān)機(jī)器,關(guān)電源了。
linux 查看1521端口狀態(tài),linux防火墻開放1521端口
2022-06-28 18:09:29閱讀 5770
大家好,又見面了,我是你們的朋友全棧君。
問題描述:使用plsql連接數(shù)據(jù)庫發(fā)現(xiàn)TNS報錯,登錄服務(wù)器發(fā)現(xiàn)防火墻開放,如果直接關(guān)閉防火墻,所有的端口都可以連接,但是實際中可能會遇到開啟防火墻的庫,這時候需要開放單一端口對某一服務(wù)器或者某一網(wǎng)段
1.開放1521端口對所有服務(wù)器
vi /etc/sysconfig/iptables
-A INPUT -m state –state NEW -m tcp -p tcp –dport 1521 -j ACCEPT
這句要放在 -A INPUT -m state –state NEW -m tcp -p tcp –dport 22 -j ACCEPT 后面,要不然不生效
重啟防火墻
[root@orcl ~]# service iptables restart
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
[root@orcl~]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination1 ACCEPT all — 0.0.0.0/0 0.0.0.0/0state RELATED,ESTABLISHED2 ACCEPT icmp — 0.0.0.0/0 0.0.0.0/0
3 ACCEPT all — 0.0.0.0/0 0.0.0.0/0
4 ACCEPT tcp — 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
5 ACCEPT tcp — 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:1521
6 REJECT all — 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
num target prot opt source destination1 REJECT all — 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
2.開放1521端口給指定網(wǎng)段,添加的指定IP,但是識別的是子網(wǎng)內(nèi)的所有IP,其他同網(wǎng)段的IP都可以訪問。如果去掉/24,指定IP的話,就訪問不了。怎么指定單一端口給某一服務(wù)器?
-A INPUT -s 192.168.163.6/24 -p tcp -m tcp –dport 1521 -j ACCEPT
[root@orcl ~]# vi /etc/sysconfig/iptables
[root@orcl~]# service iptables restart
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
[root@orcl~]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination1 ACCEPT all — 0.0.0.0/0 0.0.0.0/0state RELATED,ESTABLISHED2 ACCEPT icmp — 0.0.0.0/0 0.0.0.0/0
3 ACCEPT all — 0.0.0.0/0 0.0.0.0/0
4 ACCEPT tcp — 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
5 ACCEPT tcp — 192.168.163.0/24 0.0.0.0/0 tcp dpt:1521
6 REJECT all — 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
num target prot opt source destination1 REJECT all — 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
發(fā)布者:全棧程序員棧長,轉(zhuǎn)載請注明出處:原文鏈接:
本文參與 騰訊云自媒體分享計劃 ,歡迎熱愛寫作的你一起參與!
本文分享自作者個人站點/博客
復(fù)制
如有侵權(quán),請聯(lián)系 cloudcommunity@tencent.com 刪除。
TCP/IP
文章來自專欄
全棧程序員必看
55.1K 篇文章157 人關(guān)注
訂閱
評論 (0)
寫評論
暫無人發(fā)表評論
相關(guān)文章
linux1521端口不通,Linux開放1521端口允許網(wǎng)絡(luò)連接Oracle Listene「建議收藏」
-A INPUT -p tcp -m state –state NEW -m tcp –dport 1521 -j ACCEPT
Linux 設(shè)置oracle1521端口[通俗易懂]
centos5 安裝oracle實現(xiàn)其他機(jī)器連接,oracle server與其他機(jī)器可以ping通,但由于linux防火墻默認(rèn)是不開啟1521端口的,應(yīng)此需設(shè)...
Linux查看防火墻狀態(tài),查看開放端口
重啟一個服務(wù):systemctl restart firewalld.service
開啟1521端口監(jiān)聽_Oracle數(shù)據(jù)庫常用命令、Linux監(jiān)聽配置、Oracle linux下開放1521端口…
$ sqlplus system/manager @ file.sql 執(zhí)行sql腳本文件
linux下開放oracle1521端口以便于遠(yuǎn)程連接
1,利用root賬號登錄linux,輸入命令 :service iptables stop(先把oracle防火墻給關(guān)閉)。
Linux查看開放端口_linux查看對外端口
想通過防火墻打開8080端口登錄tomcat卻發(fā)現(xiàn)提示 /etc/rc.d/init.d/iptable.找不到文件, 最后發(fā)現(xiàn)因為于CentOS7不用ipt...
淺析linux查看防火墻狀態(tài)和對外開放的端口狀態(tài)
查詢已開放的端口 netstat -ntulp | grep 端口號:可以具體查看某一個端口號
Linux開放防火墻端口_linux防火墻打開端口
版權(quán)聲明:本文內(nèi)容由互聯(lián)網(wǎng)用戶自發(fā)貢獻(xiàn),該文觀點僅代表作者本人。本站僅提供信息存儲空間服務(wù),不擁有所有權(quán),不承擔(dān)相關(guān)法律責(zé)任。如發(fā)現(xiàn)本站有涉嫌侵權(quán)/違法違規(guī)的內(nèi)...
linux 防火墻開放端口_防火墻放行端口
顯示success表示成功 –zone=public表示作用域為公共的 –add-port=443/tcp添加tcp協(xié)議的端口端口號為443 –perma...
Linux查看端口使用狀態(tài)、關(guān)閉端口方法
首先,端口不是獨立存在的,它是依附于進(jìn)程的。某個進(jìn)程開啟,那么它對應(yīng)的端口就開啟了,進(jìn)程關(guān)閉,則該端口也就關(guān)閉了。下次若某個進(jìn)程再次開啟,則相應(yīng)的端口也再次開啟...
Linux關(guān)閉防火墻端口_防火墻開放端口設(shè)置
Linux關(guān)閉防火墻命令 下面是red hat/CentOs7關(guān)閉防火墻的命令!
Linux 查看對外開放端口
linux查看端口狀態(tài)相關(guān)命令
netstat 命令應(yīng)用是比較頻繁的,比如查看端口占用啦,查看端口進(jìn)程啦,這些時候都是有必要的。
Linux 防火墻開放特定端口 (iptables)
查看狀態(tài): iptables -L -n 下面添加對特定端口開放的方法: 使用iptables開放如下端口 /sbin/iptables -I INPU...
linux udp端口怎么打開_debian防火墻開放端口
iptables是linux下的防火墻,同時也是服務(wù)名稱。那么你知道Linux防火墻怎么開放端口么?接下來是小編為大家收集的Linux防火墻開放端口,歡迎大家閱...
Linux強(qiáng)制釋放占用端口以及Linux防火墻端口開放方法詳解
在安裝nginx,mysql,tomcat等等服務(wù)的時候,我們會遇到需要使用的端口莫名其妙被占用,下面介紹如何解決這類問題。
Linux 防火墻開放特定端口 (iptables)
iptables是linux下的防火墻,同時也是服務(wù)名稱。 service iptables status 查看防火墻狀態(tài) service ...
linux查看端口是否開放的方法總結(jié)
Linux下用netstat查看網(wǎng)絡(luò)狀態(tài)、端口狀態(tài)
在linux一般使用netstat 來查看系統(tǒng)端口使用情況步。 netstat命令是一個監(jiān)控TCP/IP網(wǎng)絡(luò)的非常有用的工具,它可以顯示路由表...
修改成歸檔模式步驟:關(guān)閉數(shù)據(jù)庫
SQL shutdown immediate
啟動數(shù)據(jù)庫到mount
SQLstartup mount;
修改成歸檔模式
SQL alter database archivelog;
打開數(shù)據(jù)庫
SQL alter database open;
修改成非歸檔模式:
步驟基本如上,只是將第三步中的命令改成如下:
SQL alter database noarchivelog;
注意事項:oracle數(shù)據(jù)庫歸檔模式的的修改需要關(guān)閉數(shù)據(jù)庫,所以在生產(chǎn)系統(tǒng)中修改時,需要考慮數(shù)據(jù)庫啟停時間。
在oracle11g中,數(shù)據(jù)庫的審計功能是默認(rèn)開啟的(這和oracle10g的不一樣,10g默認(rèn)是關(guān)閉的),
oracle11gr2的官方文檔上寫的是錯的,當(dāng)上說default是none,而且是審計到db級別的,這樣就會
往aud$表里記錄統(tǒng)計信息。
1.如果審計不是必須的,可以關(guān)掉審計功能;
sql
show
parameter
audit_trail;
name
type
value
------------------------------------
-----------
------------------------------
audit_trail
string
db
sql
alter
system
set
audit_trail=none
scope=spfile;
sql
shut
immediate;
sqlstartup
2.刪除已有的審計信息
可以直接truncate表aud$,
truncate
table
sys.aud$;
3.或者將aud$表移到另外一個表空間下,以減少system表空間的壓力和被撐爆的風(fēng)險。
附:11g中有關(guān)audit_trail參數(shù)的設(shè)置說明:
audit_trail
property
description
parameter
type
string
syntax
audit_trail
=
{
none
|
os
|
db
[,
extended]
|
xml
[,
extended]
}
default
value
none
modifiable
no
basic
no
audit_trail
enables
or
disables
database
auditing.
values:
none
disables
standard
auditing.
this
value
is
the
default
if
the
audit_trail
parameter
was
not
set
in
the
initialization
parameter
file
or
if
you
created
the
database
using
a
method
other
than
database
configuration
assistant.
if
you
created
the
database
using
database
configuration
assistant,
then
the
default
is
db.
os
directs
all
audit
records
to
an
operating
system
file.
oracle
recommends
that
you
use
the
os
setting,
particularly
if
you
are
using
an
ultra-secure
database
configuration.
db
directs
audit
records
to
the
database
audit
trail
(the
sys.aud$
table),
except
for
records
that
are
always
written
to
the
operating
system
audit
trail.
use
this
setting
for
a
general
database
for
manageability.
if
the
database
was
started
in
read-only
mode
with
audit_trail
set
to
db,
then
oracle
database
internally
sets
audit_trail
to
os.
check
the
alert
log
for
details.
db,
extended
performs
all
actions
of
audit_trail=db,
and
also
populates
the
sql
bind
and
sql
text
clob-type
columns
of
the
sys.aud$
table,
when
available.
these
two
columns
are
populated
only
when
this
parameter
is
specified.
if
the
database
was
started
in
read-only
mode
with
audit_trail
set
to
db,
extended,
then
oracle
database
internally
sets
audit_trail
to
os.
check
the
alert
log
for
details.
xml
writes
to
the
operating
system
audit
record
file
in
xml
format.
records
all
elements
of
the
auditrecord
node
except
sql_text
and
sql_bind
to
the
operating
system
xml
audit
file.
xml,
extended
performs
all
actions
of
audit_trail=xml,
and
populates
the
sql
bind
and
sql
text
clob-type
columns
of
the
sys.aud$
table,
wherever
possible.
these
columns
are
populated
only
when
this
parameter
is
specified.
you
can
use
the
sql
audit
statement
to
set
auditing
options
regardless
of
the
setting
of
this
parameter.
正常shutdown是normal模式,也就是要等所有的連接用戶都自愿的斷開了才會down庫,所以等待的時間比較長。由于不允許新用戶連接,你實在想登的話就殺掉庫進(jìn)程然后重啟吧
在oracle11g中,數(shù)據(jù)庫的審計功能是默認(rèn)開啟的(這和oracle10g的不一樣,10g默認(rèn)是關(guān)閉的),\x0d\x0aoracle11gR2的官方文檔上寫的是錯的,當(dāng)上說default是none,而且是審計到DB級別的,這樣就會\x0d\x0a往aud$表里記錄統(tǒng)計信息。\x0d\x0a \x0d\x0a1.如果審計不是必須的,可以關(guān)掉審計功能;\x0d\x0a\x0d\x0aSQL show parameter audit_trail;\x0d\x0a\x0d\x0aNAME TYPE VALUE\x0d\x0a------------------------------------ ----------- ------------------------------\x0d\x0aaudit_trail string DB\x0d\x0a\x0d\x0aSQL alter system set audit_trail=none scope=spfile;\x0d\x0aSQL shut immediate;\x0d\x0aSQLstartup\x0d\x0a2.刪除已有的審計信息\x0d\x0a可以直接truncate表aud$,\x0d\x0atruncate table SYS.AUD$;\x0d\x0a\x0d\x0a3.或者將aud$表移到另外一個表空間下,以減少system表空間的壓力和被撐爆的風(fēng)險。\x0d\x0a \x0d\x0a附:11g中有關(guān)audit_trail參數(shù)的設(shè)置說明:\x0d\x0aAUDIT_TRAIL\x0d\x0aProperty Description\x0d\x0aParameter type String\x0d\x0aSyntaxAUDIT_TRAIL = { none | os | db [, extended] | xml [, extended] }\x0d\x0aDefault valuenone\x0d\x0aModifiable No\x0d\x0aBasic No\x0d\x0aAUDIT_TRAIL enables or disables database auditing.\x0d\x0aValues:\x0d\x0anone\x0d\x0aDisables standard auditing. This value is the default if the AUDIT_TRAIL parameter was not set \x0d\x0ain the initialization parameter file or if you created the database using a method other than \x0d\x0aDatabase Configuration Assistant. If you created the database using Database Configuration \x0d\x0aAssistant, then the default is db.\x0d\x0aos\x0d\x0aDirects all audit records to an operating system file. Oracle recommends that you use the os \x0d\x0asetting, particularly if you are using an ultra-secure database configuration.\x0d\x0adb\x0d\x0aDirects audit records to the database audit trail (the SYS.AUD$ table), except for records \x0d\x0athat are always written to the operating system audit trail. Use this setting for a general \x0d\x0adatabase for manageability.\x0d\x0aIf the database was started in read-only mode with AUDIT_TRAIL set to db, then Oracle Database \x0d\x0ainternally sets AUDIT_TRAIL to os. Check the alert log for details.\x0d\x0adb, extended\x0d\x0aPerforms all actions of AUDIT_TRAIL=db, and also populates the SQL bind and SQL text CLOB-type \x0d\x0acolumns of the SYS.AUD$ table, when available. These two columns are populated only when this \x0d\x0aparameter is specified.\x0d\x0aIf the database was started in read-only mode with AUDIT_TRAIL set to db, extended, then Oracle \x0d\x0aDatabase internally sets AUDIT_TRAIL to os. Check the alert log for details.\x0d\x0axml\x0d\x0aWrites to the operating system audit record file in XML format. Records all elements of the \x0d\x0aAuditRecord node except Sql_Text and Sql_Bind to the operating system XML audit file.\x0d\x0axml, extended\x0d\x0aPerforms all actions of AUDIT_TRAIL=xml, and populates the SQL bind and SQL text CLOB-type columns\x0d\x0a of the SYS.AUD$ table, wherever possible. These columns are populated only when this parameter \x0d\x0ais specified.\x0d\x0aYou can use the SQL AUDIT statement to set auditing options regardless of the setting of this \x0d\x0aparameter.