Re: MSQL Server and Slammer

From: Marcel (m.kollenaar@home.nl)
Date: 01/31/03


From: "Marcel" <m.kollenaar@home.nl>
Date: Fri, 31 Jan 2003 20:06:09 +0100


Hi Roger,

Thanks for your reply.

"Roger Wolter[MSFT]" <rwolteronline@microsoft.com> schreef in bericht
news:ufaOZJVyCHA.1636@TK2MSFTNGP12...
> SQL Server 2000 SP3 will still listen on port 1434 UDP for incoming
> connection and it's also possible (or even probable) that some other
machine
> will try to connect to Port 1434 UDP to transfer the worm to you again.
The
> patch doesn't eliminate the use of 1434, it just ensures that the port
can't
> be used to attack your system with the worm.

In that case I keep the TCP/UDP 1433 and 1434 ports open for normal
MSSQL-server use and hope Microsoft has done its security job the right way.

Thanks,

Marcel

>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Marcel" <m.kollenaar@home.nl> wrote in message
> news:b1eb1k$12e8sl$1@ID-34238.news.dfncis.de...
> > Hi,
> >
> > I updated "Sql server Windows NT" running on a computer with XP Pro with
> the
> > re-released hotfix from Microsoft. The strange thing is that when I
> started
> > SQL server the first time after the update the firewall detected an
> > immediate attempt for a connect to the internet 255.255.255.255:1434.
> > Therefore I'm not so sure that the hotfix has helped. How can I check
that
> > this behaviour of the server is correct what I am seeing form my
firewall?
> >
> > In my case the SQL-server has nothing to do on the internet. It's only a
> > sinlge user Accounting package what I am using. The program that uses
> > SQL-server is working correct after the update.
> >
> > Tia,
> >
> > Marcel
> >
> >
>
>



Relevant Pages

  • Re: Linux als Router
    ... # Enter all trusted network interfaces here. ... # which should be available to the internet and set FW_ROUTE to yes. ... space separated list of ports, ... # Packets to silently reject without log message. ...
    (de.comp.os.unix.linux.misc)
  • Re: SharePoint 3.0: problems with external access
    ... "Go to 'Alternate Access Mappings' and in the 'Internet Zone' for your ... Port 443 won't work because it is already used by the Default Web Site. ... What you need to do is create a wildcard certificate and use it in ISA. ... The steps to publish WSS 3.0 applications behind ISA 2004 are the same ...
    (microsoft.public.windows.server.sbs)
  • Re: companyweb from RWW
    ... "Could not open connection to the host, on port 23: ... internet should tell the tale, ... Les Connor [SBS Community Member - SBS MVP] ... This site is the default web site. ...
    (microsoft.public.windows.server.sbs)
  • Re: Adp to SQL 2000 Internet connection basics
    ... install a certificate on the server and use SSL. ... you can create an Alias using the SQL-Server Client ... For using two different ports ... allready on LAN) to access the MS SQL Server 2000 throught the internet. ...
    (microsoft.public.access.adp.sqlserver)
  • Re: SharePoint 3.0: problems with external access
    ... Create a new certificate for the WSS 3.0 website? ... "Go to 'Alternate Access Mappings' and in the 'Internet Zone' for your ... Port 443 won't work because it is already used by the Default Web Site. ... What you need to do is create a wildcard certificate and use it in ISA. ...
    (microsoft.public.windows.server.sbs)