How to Connect to SBS2003R2Prem SQL Server using SQL Management St

Hello

When I try to connect to the SBS SQL Server instance over the internet I get
Connection or Instance error. So I added the External network (all of the
internet) to a new Access Rule rule (From tab) in SBS ISA server and now I
can connect just fine - but I get 50,000 attacks per day.

So I removed External and put in my home IP address (fixed) on the the From
tab instead, but I cannot connect.

Why is that?

Hi there,

> When I try to connect to the SBS SQL Server instance over the internet I
> get
> Connection or Instance error. So I added the External network (all of the
> internet) to a new Access Rule rule (From tab) in SBS ISA server and now I
> can connect just fine - but I get 50,000 attacks per day.
>
> So I removed External and put in my home IP address (fixed) on the the
> From
> tab instead, but I cannot connect.
>
> Why is that?

... because it is not a good idea to expose SQL-Server to the Internet..

Aware of "SQL slammer" (s. http://en.wikipedia.org/wiki/SQL_Slammer)?


Use VPNing to a DMZ instead. More robust (external IPs may vary) and more
secure ("first authenticate, then get the connection to (only the ports you
need)").

Example 1:

Client---Internet--Router--ISA2004/SBS2003/SQL-Server
|------VPN------|

Example 2:

Client---Internet--Router--ISA2004/SBS2003/SQL-Server
|------------VPN-----------|

--
Tobias Redelberger
StarNET Services (HomeOffice)
Frankfurter Allee 193
D-10365 Berlin
Tel: +49 (30) 86 87 02 678
Mobil: +49 (163) 84 74 421
Email:
Web: http://www.starnet-services.net

Hi Tobias

I want to connet using SQL Management Studio. It's fine. I use it all of the
time.

My question is: Why can I connect through the SBS ISA2004 firewall when I
allow all External addresses (bad idea, slammer etc) but not when I allow
only my own fixed IP address (good idea, no slammer).

Regards
Graham

"Tobias Redelberger [MVP - SBS]" wrote:

> Hi there,
>
> > When I try to connect to the SBS SQL Server instance over the internet I
> > get
> > Connection or Instance error. So I added the External network (all of the
> > internet) to a new Access Rule rule (From tab) in SBS ISA server and now I
> > can connect just fine - but I get 50,000 attacks per day.
> >
> > So I removed External and put in my home IP address (fixed) on the the
> > From
> > tab instead, but I cannot connect.
> >
> > Why is that?
>
> ... because it is not a good idea to expose SQL-Server to the Internet..
>
> Aware of "SQL slammer" (s. http://en.wikipedia.org/wiki/SQL_Slammer)?
>
>
> Use VPNing to a DMZ instead. More robust (external IPs may vary) and more
> secure ("first authenticate, then get the connection to (only the ports you
> need)").
>
> Example 1:
>
> Client---Internet--Router--ISA2004/SBS2003/SQL-Server
> |------VPN------|
>
> Example 2:
>
> Client---Internet--Router--ISA2004/SBS2003/SQL-Server
> |------------VPN-----------|
>
> --
> Tobias Redelberger
> StarNET Services (HomeOffice)
> Frankfurter Allee 193
> D-10365 Berlin
> Tel: +49 (30) 86 87 02 678
> Mobil: +49 (163) 84 74 421
> Email:
> Web: http://www.starnet-services.net
>
>
> .
>