> 2) Question ..
> I would think opening up the MS SQL port across the Internet
> is dangerous - what
> are some thoughts on having a database port open on the
> Internet? I know it
> scares me - but it would provide a answer to a problem that I
> may have to solve
> soon.
>
Maybe a good idea to use a VPN? We run a lot of services (Exchange, NT Domain, Backup software) accros a VPN, The offices are interconnected using VPN's acros the internet, and home users can also setup a VPN. Only then you are allowed (and able, because of Private IP space) to access resources behind the firewall.
You should make sure that you can access the desired subnet over the VPN. I encountered a problem when it tried to access servers in the DMZ because traffic that comes over the VPN is trown out on the trusted network, and can't route back.
Vincent de Lau
System Administrator / MSCE
