Would that be a compromise in security?  (ie. having a bogus query to
keep a connection alive)

Althought unlikely, if a person was able to gain access to the DMZ, and
they were adapt at understanding sql implementation, would they not be
able to gain access knowledge of accessing your internal network with
your configuration?
In a sense, the bogus sql call compromises the idea of having a DMZ?

Regards,
Leonard Lee
Sr. Network Administrator


-----Original Message-----
From: Scott Kellerman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 09, 2000 10:15 AM
To: [EMAIL PROTECTED]
Subject: [FW1] open tcp ports.



I have a request from our database team that is asking me if it is
possible 
to keep a sql connection from our DMZ to our internal network database
open 
indefinitely.  Right now, they have wrote a script that will do a bogus 
database query every hour to keep the connection alive.  If they don't
do 
that, and there has been no traffic for more than an hour, their
connection 
will fail.

Any insight would be great.


Thanks.....
________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com



========================================================================
========
     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
========================================================================
========


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to