Questions: WebLogic 12.2.1.4/14.1.1 Remote Anonymous RMI via T3 or IIOP + Connection Filter Rules
WebLogic 12.2.1.4 and 14.1.1 have default values of "true" for both these properties:
remote-anonymous-rmiiiop-enabled=true
remote-anonymous-rmit3-enabled=true
Question #1)
If I do NOT explicitly disable them in JAVA_OPTIONS meaning these params are NOT added: " -Dweblogic.security.remoteAnonymousRMIIIOPEnabled=false -Dweblogic.security.remoteAnonymousRMIT3Enabled=false "
BUT all remote accesses are blocked in the Connection Filter rules (except for the local WebLogic server VM):
<connection-filter-rule>sd-2xmb-nypd.nam.nsroot.net * * allow https</connection-filter-rule> #local VM hostname
<connection-filter-rule>sd-2xmb-nypd.nam.nsroot.net * * allow t3s</connection-filter-rule> #local VM hostname
<connection-filter-rule>sd-2xmb-nypd.nam.nsroot.net * * allow ldap</connection-filter-rule> #local VM hostname