Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT

From: Keith W. McCammon (km_at_km.com)
Date: 04/28/04 

Date: Wed, 28 Apr 2004 10:41:09 -0400

If your SQL server is connected to any host outside of your local network,
your firewall is horribly misconfigured. There's no reason for this.

"msnews.microsoft.com"
<vincentnospamsoremovethistomailme@marlonpointandthenbe.com> wrote in
message news:u$dNnMRLEHA.1416@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> I used TCPView (http://www.sysinternals.com/ntw2k/source/tcpview.shtml) on
a
> Windows 2003 server, used as a webserver. The server is behind a firewall.
> I saw a lot of entries like:
>
> sqlservr.exe:1928 TCP 2colt397:ms-sql-s
> rrcs-se-24-73-127-66.biz.rr.com:15628 TIME_WAIT
> or
> sqlservr.exe:1928 TCP 2colt397:ms-sql-s
> rrcs-se-24-73-127-66.biz.rr.com:15628 SYN_RCVD
>
>
> Is this a domain trying to find an open port to break in? What does the
> TIME_WAIT part mean? Do I have to get worried or is this not that strange?
>
> Thank you for your advice,
> Vincent
>
>
>

Relevant Pages

  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: oops again
    ... open on the Firewall, and the default should be none. ... Since you intend to install IIS purely as a test server for your ASPX pages ... Make sure that IIS is only listening on the local network (192.168.x.y ...
    (microsoft.public.inetserver.iis)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: For Microsoft Partners and Customers Who Cant Download or Access
    ... to reconfigure the firewall, but to use a static IP on your client ... and to make sure that the DNS server entries on the client are ... Microsoft for msdn2.microsoft.com. ... use a static IP and set the DNS server addresses to the DNS ...
    (microsoft.public.dotnet.general)