Re: MSQL Server and Slammer
From: Marcel (m.kollenaar@home.nl)
Date: 01/31/03
- Next message: Richard: "Script error after SP3 Install"
- Previous message: Tom Steger: "SQL 2000 SP3 doesn't apply older fixes in SP1"
- In reply to: Roger Wolter[MSFT]: "Re: MSQL Server and Slammer"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Marcel" <m.kollenaar@home.nl> Date: Fri, 31 Jan 2003 20:06:09 +0100
Hi Roger,
Thanks for your reply.
"Roger Wolter[MSFT]" <rwolteronline@microsoft.com> schreef in bericht
news:ufaOZJVyCHA.1636@TK2MSFTNGP12...
> SQL Server 2000 SP3 will still listen on port 1434 UDP for incoming
> connection and it's also possible (or even probable) that some other
machine
> will try to connect to Port 1434 UDP to transfer the worm to you again.
The
> patch doesn't eliminate the use of 1434, it just ensures that the port
can't
> be used to attack your system with the worm.
In that case I keep the TCP/UDP 1433 and 1434 ports open for normal
MSSQL-server use and hope Microsoft has done its security job the right way.
Thanks,
Marcel
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Marcel" <m.kollenaar@home.nl> wrote in message
> news:b1eb1k$12e8sl$1@ID-34238.news.dfncis.de...
> > Hi,
> >
> > I updated "Sql server Windows NT" running on a computer with XP Pro with
> the
> > re-released hotfix from Microsoft. The strange thing is that when I
> started
> > SQL server the first time after the update the firewall detected an
> > immediate attempt for a connect to the internet 255.255.255.255:1434.
> > Therefore I'm not so sure that the hotfix has helped. How can I check
that
> > this behaviour of the server is correct what I am seeing form my
firewall?
> >
> > In my case the SQL-server has nothing to do on the internet. It's only a
> > sinlge user Accounting package what I am using. The program that uses
> > SQL-server is working correct after the update.
> >
> > Tia,
> >
> > Marcel
> >
> >
>
>
- Next message: Richard: "Script error after SP3 Install"
- Previous message: Tom Steger: "SQL 2000 SP3 doesn't apply older fixes in SP1"
- In reply to: Roger Wolter[MSFT]: "Re: MSQL Server and Slammer"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|