In theory that is correct.
However, there are places such as web hosting companies that offer SQL to
their customers. There are also companies too cheap to pay for a VPN and
might have an offsite data center.
While closing those IP's completely is the best solution, another idea may
be to not use those standard ports if you HAVE to access your SQL server
remotely. Use some non standard ones perhaps.

-----Original Message-----
From: Len Conrad [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, January 25, 2003 8:45 AM
To: NT 2000 Discussions
Subject: RE: SQL worm?



>Close these ports:
>ms-sql-s 1433/tcp #Microsoft-SQL-Server
>ms-sql-s 1433/udp #Microsoft-SQL-Server
>ms-sql-m 1434/tcp #Microsoft-SQL-Monitor
>ms-sql-m 1434/udp #Microsoft-SQL-Monitor

no, block access from internet to SQL ip (effectively blocking ALL ports).

What business does anybody on internet have in accessing your SQL server?

Len


------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to