-A INPUT -p tcp -m state --state NEW -m tcp --dport 1521 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohib
这样启动后远程连接会报错： oracle ORA-12514:TNS:listener does not currently know of service requested in connect descriptor 问题原因：数据库实例没注册到listener 解决方法一： 在listener.ora里面添加了一行 SID_LIST_LISTENER = (SID_LIST = (SID_DESC = (GLOBAL_DBNAME = orcl) (SID_NAME = orcl) ) )
原文：http://www.cnblogs.com/tomato2014/p/6078454.html