Oracle Weblogic Server (MOSC)

MOSC Banner

Questions: WebLogic 12.2.1.4/14.1.1 Remote Anonymous RMI via T3 or IIOP + Connection Filter Rules

WebLogic 12.2.1.4 and 14.1.1 have default values of "true" for both these properties:

remote-anonymous-rmiiiop-enabled=true
remote-anonymous-rmit3-enabled=true

Question #1)

If I do NOT explicitly disable them in JAVA_OPTIONS meaning these params are NOT added: " -Dweblogic.security.remoteAnonymousRMIIIOPEnabled=false -Dweblogic.security.remoteAnonymousRMIT3Enabled=false "

BUT all remote accesses are blocked in the Connection Filter rules (except for the local WebLogic server VM):

<connection-filter-rule>sd-2xmb-nypd.nam.nsroot.net * * allow https</connection-filter-rule> #local VM hostname
<connection-filter-rule>sd-2xmb-nypd.nam.nsroot.net * * allow t3s</connection-filter-rule> #local VM hostname
<connection-filter-rule>sd-2xmb-nypd.nam.nsroot.net * * allow ldap</connection-filter-rule> #local VM hostname

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center