Monday, July 14, 2014

Oracle default port list

The following table contains Oracle default ports for different products like Oracle Database or Oracle Application Server.
Changing the default ports can help to stop simple attacks but not real portscans. In the world of Oracle it is very often not possible to change the default port because the port is hardcoded.

At least for the Oracle database (except iasdb) it's is recommended to change the TNS listener port from 1521/1526 to something else.

The IANA default port number can be found here: http://www.iana.org/assignments/port-numbers

Service

Port

Product

How to change

Oracle HTTP Server listen port / Oracle HTTP Server port80Oracle Application ServerEdit httpd.conf and restart OHS
Oracle Internet Directory(non-SSL)389Oracle Application Server
Oracle HTTP Server SSL port443Oracle Application ServerEdit httpd.conf and restart OHS
Oracle Internet Directory(SSL)636Oracle Application Server
Oracle Net Listener / Enterprise Manager Repository port1521Oracle Application Server / Oracle DatabaseEdit listener.ora and restart listener
Oracle Net Listener1526Oracle DatabaseEdit listener.ora and restart listener
Oracle Names1575Oracle DatabaseEdit names.ora and restart names server
Oracle Connection Manager (CMAN)1630Oracle Connection ManagerEdit cman.ora and restart Connection Manager
Oracle JDBC for Rdb Thin Server1701Oracle Rdb
Oracle Intelligent Agent1748Oracle Application Serversnmp_rw.ora
Oracle Intelligent Agent1754Oracle Application Serversnmp_rw.ora
Oracle Intelligent Agent1808Oracle Application Serversnmp_rw.ora
Oracle Intelligent Agent1809Oracle Application Serversnmp_rw.ora
Enterprise Manager Servlet port SSL1810Oracle Enterprise Manager
Oracle Connection Manager Admin (CMAN)1830Oracle Connection Manager (CMAN)Edit cman.ora and restart Connection Manager
Enterprise ManagerAgent port1831Oracle Enterprise Manager
Enterprise Manager RMI port1850Oracle Enterprise Manager
Oracle XMLDB FTP Port2100Oracle Databasechange dbms_xdb.cfg_update
Oracle GIOP IIOP2481Oracle DatabaseEdit listener.ora/init.ora and restart listener/database
Oracle GIOP IIOP for SSL2482Oracle DatabaseEdit listener.ora/init.ora and restart listener/database
Oracle OC4J RMI3201Oracle Application Server

Oracle OC4J AJP3301Oracle Application Server

Enterprise Manager Reporting port3339Oracle Application ServerEdit oem_webstage/oem.confand restart OHS
Oracle OC4J IIOP3401Oracle Application Server

Oracle OC4J IIOPS13501Oracle Application Server

Oracle OC4J IIOPS23601Oracle Application Server

Oracle OC4J JMS3701Oracle Application Server

Oracle9iAS Web Cache Admin port4000Oracle Application ServerWebcache Admin GUI or webcache.xml
Oracle9iAS Web Cache Invalidation port4001Oracle Application ServerWebcache Admin GUI or webcache.xml
Oracle9iAS Web Cache Statistics port4002Oracle Application ServerWebcache Admin GUI or webcache.xml
Oracle Internet Directory(SSL)4031Oracle Application Server
Oracle Internet Directory(non-SSL)4032Oracle Application Server
OracleAS Certificate Authority (OCA) - Server Authentication4400Oracle Application Server
OracleAS Certificate Authority (OCA) - Mutual Authentication4401Oracle Application Server
Oracle HTTP Server SSL port4443Oracle Application ServerEdit httpd.conf and restart OHS
Oracle9iAS Web Cache HTTP Listen(SSL) port4444Oracle Application ServerWebcache Admin GUI or webcache.xml
Oracle TimesTen4662Oracle TimesTen
Oracle TimesTen4758Oracle TimesTen
Oracle TimesTen4759Oracle TimesTen
Oracle TimesTen4761Oracle TimesTen
Oracle TimesTen4764Oracle TimesTen
Oracle TimesTen4766Oracle TimesTen
Oracle TimesTen4767Oracle TimesTen
Oracle Enterprise Manager Web Console5500Oracle Enterprise Manager Web
iSQLPlus 10g5560Oracle i*SQLPlus
iSQLPlus 10g5580Oracle i*SQLPlus RMI Port
Oracle Notification Service request port6003Oracle Application Server
Oracle Notification Service local port6100Oracle Application Server
Oracle Notification Service remote port6200Oracle Application Server
Oracle9iAS Clickstream Collector Agent6668Oracle Application Server
Java Object Cache port7000Oracle Application Server
DCM Java Object Cache port7100Oracle Application Server
Oracle HTTP Server Diagnostic Port7200Oracle Application Server
Oracle HTTP Server Port Tunneling7501Oracle Application Server
Oracle HTTP Server listen port / Oracle HTTP Server port7777Oracle Application ServerEdit httpd.conf and restart OHS
Oracle9iAS Web Cache HTTP Listen(non-SSL) port7779Oracle Application ServerWebcache Admin GUI or webcache.xml
Oracle HTTP Server Jserv port8007Oracle Application Server
Oracle XMLDB HTTP port8080Oracle Databasechange dbms_xdb.cfg_update
OC4J Forms / Reports Instance8888Oracle Developer Suite
OC4J Forms / Reports Instance8889Oracle Developer Suite
Oracle Forms Server 6 / 6i9000Oracle Application Server
Oracle SOAP Server9998Oracle Application Server
OS Agent14000Oracle Application Server
Oracle Times Ten15000Oracle Times Ten
Oracle Times Ten15002Oracle Times Ten
Oracle Times Ten15004Oracle Times Ten
Log Loader44000Oracle Enterprise Manager

------------

Oracle Enterprise Manager (OEM) Cloud Control.
1
2
3
4
5
6
7
8
9
10
11
12
13
Port Name                Normal Ranges    Exadata Default Value
EM Upload HTTP Port      4889-4898        4889
EM Upload HTTPS Port     1559,4899-4908   1159
 
Node Mgr HTTPS Port      7401-7500        Check
Managed Server HTTP Port 7201-7300        Check
EM Console HTTP Port     7788-7798        7788
EM Console HTTPS Port    7799-7809        7799
 
Management Agent Port    3872,1830-1849   Check
Admin Server HTTP Port   7001             Check
Admin Server HTTPS Port  7101-7200        Check
Managed Server HTTPS Port 7301-7400       Check
Check means check the port number configured in the installation.
There are a few ports not necessarily through the firewall between Exadata and OEM OMS.
1
EM Repository DB Port                 1521
There are also some more ports related to OEM and optional, and only need when using the components.
1
2
3
4
5
6
7
8
9
10
11
12
Port Name                             Port Number
JVM Diagnostics Managed Server        3800
JVM Diagnostics Managed Server (SSL)  3801
 
ADP RMI Registry Port                 51099
ADP Java Provider Port                55003
ADP Remote Service Controller Port    55000
ADP Listen                            4210
ADP Listen Port (SSL)                 4211
BI Publisher HTTP                     9701
BI Publisher HTTPS                    9702
Secure web connection to oracle.com   443
Note: Port 443 is https to updates.oracle.com, support.oracle.com, ccr.oracle.com, login.oracle.com,aru-akam.oracle.com
It is outgoing from OMS and used for communication with Oracle for OCM, MOS, Patching, Self-Updates, ASR.
To verify detail about the ports used in oms, you can run the followings
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
[oracle@gc12c bin]$ emctl status oms -details
Oracle Enterprise Manager Cloud Control 12c Release 2
Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host : gc12c.enkitec.com
HTTP Console Port : 7789
HTTPS Console Port : 7801
HTTP Upload Port : 4890
HTTPS Upload Port : 4901
EM Instance Home : /u01/app/oracle/oms12c/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /u01/app/oracle/oms12c/gc_inst/em/EMGC_OMS1/sysman/log
OMS is not configured with SLB or virtual hostname
Agent Upload is locked.
OMS Console is locked.
Active CA ID: 1
Console URL: https://gc12c.enkitec.com:7801/em
Upload URL: https://gc12c.enkitec.com:4901/empbs/upload
 
WLS Domain Information
Domain Name : GCDomain
Admin Server Host: gc12c.enkitec.com
 
Managed Server Information
Managed Server Instance Name: EMGC_OMS1
Managed Server Instance Host: gc12c.enkitec.com
WebTier is Up
Oracle Management Server is Up
I could not find a command to show what’s port number is used for something like Node Manager, Managed Server. But do find a way to show this kind of information from a temp file in the initial installation. The file is in MIDDLEWARE_HOME/.gcinstall_temp/staticports.ini on OMS host.
1
2
3
4
5
6
7
8
9
10
[oracle@gc12c oracle]$ cat /u01/app/oracle/oms12c/.gcinstall_temp/staticports.ini
Enterprise Manager Upload Http Port=4890
Enterprise Manager Upload Http SSL Port=4901
Enterprise Manager Central Console Http SSL Port=7801
Node Manager Http SSL Port=7405
Managed Server Http Port=7203
Enterprise Manager Central Console Http Port=7789
Oracle Management Agent Port=3872
Admin Server Http SSL Port=7102
Managed Server Http SSL Port=7302
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)