Re: some thoughts on the Slammer fiasco

From: Eli Allen (eallen@bcpl.net)
Date: 01/26/03


From: "Eli Allen" <eallen@bcpl.net>
Date: Sun, 26 Jan 2003 12:05:14 -0500


Sometimes those of us who do know better have no power and when we do try to
get those in power to approve the hotfixes and service packs they just claim
it can break SQL server. So while I can't do anything to prevent the mess I
am left with cleaning it up.

BTW here is a question someone who knows networks would not ask. "Can
(insert name of firewall) block port X?" If you're just completely blocking
the port its better to do it at the router level so the firewall can do the
more complex processing. Plus hardware firewalls aren't cheap so if you're
trying to do security on a budget you can just set the TCP/IP properties to
connect over certain ports so the IP stack won't even bother looking at the
packets.

--
Eli Allen
eallen@bcpl.net
"Sid" <gotmail@aol.com> wrote in message
news:eTNsOqVxCHA.1620@TK2MSFTNGP11...
>
> These are my thoughts regarding some of the moronic posts seen here
> recently.
>
> WTF are you running a software firewall on an SQL box for.  SQL should
stand
> alone.  And please buy a hardware firewall.
>
> Here is a question someone running Oracle would not ask.  "Can (software
> firewall of your choice) block port X.
>
> I am an SQL Server DBA and quite frankly ashamed of the low level of
> knowledge and lack of willingness to keep up with simple security updates
on
> the part of the losers here whining about how to keep their servers safe.
> Either learn how to play, or get of the field.  And people wonder why SQL
> Server DBAs make less than a DBA for Oracle, DB2, Sybase, etc.
>
> "But is was sooo easy to install, I clicked next.  I'm safe now, right?"
> Personally, I hope the IT slump goes on for 5 more years to weed out
> wannabes like the people here.
>
> Sid
>
>


Relevant Pages

  • Re: newbie Frage zu Server-Explorer - Datenverbindungen
    ... "Microsoft SQL Server " an. ... Ich könnte den Firewall wohl ausschalten, da die Maschine via Proxi ins Netz geht. ... Ich versuche doch nur - lokal innerhalb meiner eigenen Machine - auf der ich als Admin arbeite - hinzubekommen, dass der Servername (oder meinetwegen auch lokal oder was angezeigt wird. ... Im SQL Server Configuration Manager habe ich Shared Memory, Named Pipes, UND TCP/IP Aktiviert. ...
    (microsoft.public.de.german.entwickler.dotnet.datenbank)
  • Re: SQL Server does not exist or access denied
    ... > Windows 2003 SP1 includes a firewall. ... > Mike Epprecht, Microsoft SQL Server MVP ... >>> It did not even get to SQL Server on the server. ...
    (microsoft.public.sqlserver.connect)
  • Re: Cannot connect to SQL Server
    ... Hitchhiker's Guide to Visual Studio and SQL Server ... I see that you said you tried turning off the firewall, but the Windows firewall that is turned on in SP2 causes most of these problems. ... I have checked the Server Network Utility and ClientNetwork Utility: ...
    (microsoft.public.sqlserver.connect)
  • Re: Help Needed Configuring ODBC
    ... The only thing I can think is that firewall at your work is blocking 1433. ... From my office PC, I can access SQL, using ODBC, with Access or my ... > ODBC to access my office's SQL server using ODBC Data Source Administrator ...
    (microsoft.public.sqlserver.odbc)
  • Re: Connectivity Issues - Bizzare
    ... Sounds like firewall to me. ... >I am trying to connect to a default instance of SQL Server 2000 Enterprise ... I create a SqlDataAdapter on the web form, ... I take the same connection string from the web app, ...
    (microsoft.public.sqlserver.connect)