----------------------------------------------------------- New Message on BDOTNET
----------------------------------------------------------- From: SecCode Message 5 in Discussion Before I answer your question, I do want to emphasize that exposing SQL Server to the public Internet is not a recommended configuration from a security perspective. If it is under your control, I would HIGHLY suggest looking at the following document on how to secure your Database Server. Improving Web Application Security: Threats and Countermeasures Chapter 18 - Securing Your Database Server http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/ht ml/THCMCh18.asp The answer to your question SQL Server, by default, listens on TCP port 1433 and uses UDP port 1434 for client-server negotiation, so they would have to be open in the firewall. Again, opening this up is NOT recommended. This is how worms like the SQL Slammer were able propagate so widely some time back.. - Anil ----------------------------------------------------- - http://SecureCoder.com - Architecture & Security in an Insecure World ----------------------------------------------------- ________________________________ From: BDOTNET [mailto:[EMAIL PROTECTED] Sent: Friday, April 30, 2004 5:47 AM To: BDOTNET Subject: SQL Server thru firewall Hi all, I have a VB application which has to connect to a SQL Server 7.0, running on publicly hosted server. Now the problem is, I am behind a firewall and I am not able to connect to SQLserver thru my VB application (DSN connection string). How do we connect to the server?. Also if the SQLServer is behind the firewall how do we connect? Is there any firewall configurations we need to do?. Regards and thanks in advance. NOTE: the VB application is a simple 2 tier application. ----------------------------------------------------------- To stop getting this e-mail, or change how often it arrives, go to your E-mail Settings. http://groups.msn.com/bdotnet/_emailsettings.msnw Need help? If you've forgotten your password, please go to Passport Member Services. http://groups.msn.com/_passportredir.msnw?ppmprop=help For other questions or feedback, go to our Contact Us page. http://groups.msn.com/contact If you do not want to receive future e-mail from this MSN group, or if you received this message by mistake, please click the "Remove" link below. On the pre-addressed e-mail message that opens, simply click "Send". Your e-mail address will be deleted from this group's mailing list. mailto:[EMAIL PROTECTED]
