Re: Is there any reason to use port 1433?

Han,

1433 is the default port that SQL Server uses for TCP/IP client communication. You can configure that to be another port, but hackers will find them and attempt hacking there too.

I wrote a utility to do a bit of self defense for these hacking attempts.

http://www.creeksolutions.com/Products/BlockSSHacking/tabid/92/Default.aspx

BlockSSHacking runs as a Windows service protecting your SQL Server from brute force hacking attempts coming from the Internet.

The service checks your system every 5 minutes (configurable setting) for evidence of ongoing hacking. If such attempts are in progress then those source addresses are blocked from future access to your server (quickly leading to you recovering your bandwidth).

BlockSSHacking notifies you via email when it has blocked someone from hacking your system.

Henrik

Han wrote:
Hello

I am new to SQL security.

Some days ago I happened to open my event log and found lots of attacks have been going on to my SQL server 2005. Maybe for some months. I have been using firewall and Windows integrated authentication. The attacks might be not quite successful. Anyway, I changed the SQL server port from 1433 to something another. Strikingly all the attacks have gone. Now I am curious why they use port number 1433. Is there any reason to use the port, benefit or something? Or is there any danger or caution to use something other than 1433?


.

Relevant Pages

  • Re: What is the risk of having Port# 1433 opened ?
    ... you're vulnerable to denial of service attacks... ... If you NEED SQL Server to communicate over the public Internet ... > port and or ports opened on my servers, but that is normal, because all ... > villagers within my village and plus others who happen to pass by. ...
    (microsoft.public.sqlserver.security)
  • Re: ICMP (Ping)
    ... Actually, if they have the config wrong, and a sql server is servicing the ... yes most of the time they attack depending on what a port scan ... Captus Networks ... - Instantly Stop DoS/DDoS Attacks, ...
    (Security-Basics)
  • [NT] Microsoft SQL Server 2000 Unauthenticated System Compromise
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Microsoft's database server SQL Server 2000 exhibits two buffer-overrun ... clients connecting to TCP port 1433 or both. ... This message is a single byte packet, ...
    (Securiteam)
  • Re: Is there any way to prevent hacker trying to guess sa password?
    ... and port 1433 will not be open. ... If someone can crash SQL Server by connecting to port 1433, ... You don't need multiple security experts. ...
    (microsoft.public.sqlserver.security)
  • Re: Accessing sql server
    ... port, select All ports, in Remote port, select Fixed port and input 1433 ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | I have now checked and I can access the sql server when creating an ODBC ...
    (microsoft.public.windows.server.sbs)