Re: Server on DMZ

From: Denny (mrdenny@gamespy.com)
Date: 04/03/03 

From: "Denny" <mrdenny@gamespy.com>
Date: Thu, 3 Apr 2003 10:58:40 -0800

It's not a dynamic port. The port is 1433. The port that the data comes
back on is dynamic, as is every other TCP connection. If you open 1433 from
the DMZ to the SQL Server you should be ok. You might also need to open UDP
1434, but you shouldn't. 

--
Denny Cherry
Database Administrator
GameSpy Industries
"Patrick Dunnigan" <nobody@nobody.com> wrote in message
news:3q1n8vkukqmabkfbf0tl4craosi2h9v15o@4ax.com...
> the DMZ is made for public server, i.e web, mail, I only have ports
> open for http, smtp etc. According to Sonicwall they can't handle the
> dynamic ports needed for SQl to talk to the IIS server.
> On Wed, 2 Apr 2003 10:27:57 -0800, "Denny" <mrdenny@gamespy.com>
> wrote:
>
> >Pudding your SQL Server on the DMZ causes major problems.  As you have
> >basically put the sql server in front of your main fire wall.  Can you
put
> >the IIS Server behind the fire wall, allow traffic on port 80 to the IIS
> >Server.  That way both servers are behind the firewall.
> >
> >For the record I wouldn't recommend an IIS server in front of a firewall
> >either.
>
Quantcast