Ahh..yes.  The ODBC Driver, are you using named pipes or are you using
TCP/IP only?  I would strongly suggest turning OFF \\.\named pipes are it is
a nightmare to get it to work through a firewall.  Not sure about a PIX(ie
stick) but the CheckPoint FW-1 did give me grief for some time.

  Good luck!

----------------------------------------|
Ralph M. Los
Sr. Security Consultant and Trainer
          EnterEdge Technology, L.L.C.
          [EMAIL PROTECTED]
          (770) 955-9899 x.206
----------------------------------------|

::-----Original Message-----
::From: Marc Sahr [mailto:[EMAIL PROTECTED]]
::Sent: Friday, February 01, 2002 10:54 AM
::To: [EMAIL PROTECTED]
::Subject: FW: SQL and web across the PIX
::
::
::Thanks for everyone's input on this issue. Looks like it's a SQL COM+
::issue with our code. We're still working on it, I have 2 techs from
::Microsoft looking at it (Free tech support through the 
::Certified Partner
::program is wonderful).
::
::Marc
::
::-----Original Message-----
::From: Marc Sahr 
::Sent: Tuesday, January 29, 2002 8:48 AM
::To: [EMAIL PROTECTED]
::Subject: SQL and web across the PIX
::
::
::2nd go-round of this problem:
:: 
::I still can't get my web server and my SQL server to communicate
::successfully (ie login to the SQL database application from 
::the browser
::window) through the PIX. To reiterate the scenario: My MS IIS 5 web
::server is located on the DMZ, my SQL 2000 server is located on the
::inside interface, and the clients are on the outside interface. All
::servers and clients are W2K/SP2. All servers are latest 
::service pack for
::their respective platforms. 
:: 
::Clients can see the website as a static-translated IP address through
::the PIX. They can't log on to the SQL application (error message is
::MS-speak for "can't find database").
:: 
::All ports are allowed access through ACLs on the PIX bidirectionally
::through the PIX. Remember this is a test envionment so that's OK. All
::protocols are allowed access as above.
:: 
::All hosts can ping each other, their interfaces, etc. ICMP is 
::allowed in
::the config.
:: 
::So, I ask again: Any ideas?
:: 
::TIA,
::Marc Sahr
::Network Administrator
::[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 
:: 
::
::_______________________________________________
::Firewalls mailing list
::[EMAIL PROTECTED]
::http://lists.gnac.net/mailman/listinfo/firewalls
::
::_______________________________________________
::Firewalls mailing list
::[EMAIL PROTECTED]
::http://lists.gnac.net/mailman/listinfo/firewalls
::

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to