Salesforce

How to configure a Windows firewall to authorize all inbound traffic to OpenEdge databases

« Go Back

Information

 
TitleHow to configure a Windows firewall to authorize all inbound traffic to OpenEdge databases
URL Name000033840
Article Number000158394
EnvironmentProduct: OpenEdge
Version: 10.x, 11.x, 12.x
OS: Windows
Other: Firewall
Question/Problem Description
How to configure the Windows internal firewall to authorize all inbound traffic to OpenEdge databases?
How to connect to an OpenEdge database on a Windows machine from another computer through a firewall?.
How to configure the internal Windows firewall to accept TCP connections to OpenEdge databases located on a Windows machine.
Steps to Reproduce
Clarifying Information
Error Message
Defect Number
Enhancement Number
Cause
Resolution
OpenEdge 11.7.x and prior: firewall rule exceptions based on process image name are needed for _sqlsrv2, _mprosrv 
  • Both ABL and SQL remote client need to first connect to the Login Broker process: _mprosrv (inbound)
  • SQL remote clients, connect to the Remote Server process: _sqlsv2 (outbound/inbound)
  • ABL remote clients, connect to the Remote Server process: _mprosrv (outbound/inbound)
In OpenEdge 12: firewall rule exceptions based on process image name are needed for _sqlsrv2, _mprosrv and _mtprosrv
  • Both ABL and SQL remote client need to first connect to the Login Broker process: _mprosrv (inbound)
  • SQL remote clients, connect to the Remote Server process: _sqlsv2 (outbound/inbound)
  • ABL remote clients connecting to a single-threaded database Server process is: _mprosrv (outbound/inbound)
  • ABL remote clients connecting to a multithreaded database Server process is: _mtprosrv (outbound/inbound)
For further information refer to Article  Starting the multithreaded database server  

To accept all incoming TCP connections to OpenEdge databases based on Broker / Server process image names:

netsh advfirewall firewall add rule name="OE BRK and ABLSRV" dir=in action=allow protocol=TCP program="<dlc>\bin\_mprosrv.exe" enable=yes 
netsh advfirewall firewall add rule name="OE ABL TSRV" dir=in action=allow protocol=TCP program="<dlc>\bin\_mtprosrv.exe" enable=yes 
netsh advfirewall firewall add rule name="OE ABL TSRV" dir=out action=allow protocol=TCP program="<dlc>\bin\_mtprosrv.exe" enable=yes 
netsh advfirewall firewall add rule name="OE SQLSRV" dir=in action=allow protocol=TCP program="<dlc>\bin\_sqlsrv2.exe" enable=yes 
netsh advfirewall firewall add rule name="OE SQLSRV" dir=out action=allow protocol=TCP program="<dlc>\bin\_sqlsrv2.exe" enable=yes 

Once the Firewall rules have been added based on the respective OpenEdge executables, navigate to:
'Start -> Administrative Tools -> Windows Firewall with Advanced Security'
In the left column navigate to 'Inbound Rules',
Select the new rule and further restrict the possible connections to OpenEdge databases.
For further information refer to Article  Which ports needs to be open on a firewall between a remote client and the database?  
Workaround
Notes
Keyword Phrase
Last Modified Date11/20/2020 6:56 AM

Powered by