Connections via Firewall Fail and Report ORA-12569 TNS packet checksum failure in Trace (Doc ID 976703.1)

Last updated on OCTOBER 04, 2016

Applies to:

Oracle Net Services - Version: 10.2.0.1 - Release: 10.2
Information in this document applies to any platform.
Connections via firewall failing

Symptoms

Oracle Net connections via firewall fail with error. For our example we had LDAP command failing with "LDAP error code 50 - Insufficient Access Rights". But the issue can reproduce with timeout or other error codes or even connections just hanging.
Firewall has Deep Packet Inspection enabled
Oracle Net trace of the command running shows ORA-12569 TNS packet checksum failure: is reported in the trace:
[10-DEC-2009 17:54:19:923] nsprecv: 886 bytes from transport
[10-DEC-2009 17:54:19:923] nsprecv: header checksum error
[10-DEC-2009 17:54:19:923] nsprecv: packet hdr
[10-DEC-2009 17:54:19:923] nsprecv: 00 06 04 00 00 00 00 00 |........|
[10-DEC-2009 17:54:19:923] nsprecv: error exit
[10-DEC-2009 17:54:19:923] nserror: entry
[10-DEC-2009 17:54:19:923] nserror: nsres: id=0, op=68, ns=12569, ns2=0; nt[0]=0, nt[1]=0, nt[2]=0; ora[0]=0, ora[1]=0, ora[2]=0

Changes

Connection is go via a firewall

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms