Re: Remote SQL Server
From: Chris Miller (cmiller_at_compuville.net)
Date: 01/22/04
- Next message: Piedmont: "Re: Error 17055"
- Previous message: Russell Fields: "Re: Verify if NT users exist prior to granting access to SQL database"
- In reply to: Don Grover: "Re: Remote SQL Server"
- Next in thread: Masahiro Ito: "Re: Remote SQL Server"
- Reply: Masahiro Ito: "Re: Remote SQL Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 22 Jan 2004 15:19:38 -0500
I'm going to try to lock it down to only a list of known host ranges, but
I'm not sure that will be possiable.
Where do I set what hosts each user can login from? Also, how do I set sa to
only be allowed to connect from localhost?
-Chris
"Don Grover" <spamfree@assoft.com.au> wrote in message
news:%23JhsCNS4DHA.2404@TK2MSFTNGP10.phx.gbl...
> I get about 10-20,000 hits a night from what looks like dictionary
attacks.
> Make sure all users & sa user have a a very long non standard password.
> Can you lock the firewall down to a list of known host ranges on port 1433
> ?.
> Run MS Base line security application on sql server box !.
> Remove all non essensial db's on sql installation.
>
> Regards
> Don Grover
>
> "Chris Miller" <cmiller@compuville.net> wrote in message
> news:1010agvq9v9k154@corp.supernews.com...
> > I've got a customer who has an application written in Access. They are
> > hitting some boundaries of Access, and are ready to move to SQL. They
are
> > going to keep the front end in Access b/c of the massive amounts of code
> > they have written. We are going to set them up a SQL server in a
> datacenter,
> > and use linked tables in their access database. They have offices all
over
> > the eastern half of the US, so they will need to connect to the SQL
server
> > from anywhere, pretty much.
> >
> >
> >
> > Basically my question is how can I keep this secure? I'm going to setup
> > encryption. Is it a bad idea to leave SQL server open on the public?
How
> > can I lock it down and still keep functionality?
> >
> >
>
>
- Next message: Piedmont: "Re: Error 17055"
- Previous message: Russell Fields: "Re: Verify if NT users exist prior to granting access to SQL database"
- In reply to: Don Grover: "Re: Remote SQL Server"
- Next in thread: Masahiro Ito: "Re: Remote SQL Server"
- Reply: Masahiro Ito: "Re: Remote SQL Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|