I installed MSDE2000 on my Win XP Pro computer to run
through examples in a book. Some of the examples uses the
Pubs database which I cannot find in my MSDE setup. How
can I setup the Pubs database in my setup and where can I
download it from? Thanks.
We have just made a file available in the Microsoft Download Center that
contains scripts for creating the pubs and Northwind sample databases.
Go to http://www.microsoft.com/downloads
Select SQL Server as the Product and enter sample databases in the Keywords
field and click Go. You will see an entry for Sample Databases.
The direct link is:
http://www.microsoft.com/downloads/d...DisplayLang=en
From the download file readme:
These copies of the scripts are the same as the versions included with SQL
Server 2000, except for these changes:
a.. The script for creating pubs, instpubs.sql, has been modified to
install pubs and all of the pubs data in one step. The version of
instpubs.sql included in SQL Server 2000 does not load in some of the pubs
data, customers had to run batch jobs to install some of the larger data
values.
b.. The scripts improve security by not creating a guest account and not
assigning permissions to the objects in the sample databases. Customers who
install the sample databases can now control access to the sample databases.
SQL Server 2000 Desktop Engine (MSDE 2000) customers can also use these
copies of the scripts to install pubs and Northwind.
Alan Brewer [MSFT]
Lead Programming Writer
SQL Server Documentation Team
This posting is provided "AS IS" with no warranties, and confers no rights
Showing posts with label computer. Show all posts
Showing posts with label computer. Show all posts
Friday, March 9, 2012
Wednesday, March 7, 2012
publish sql on the internet
Hi,
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!Tomer,
Don't cross post, answered in .server.
You really MUST read this page:
http://www.aspfaq.com/5003
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company networ
k.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!Tomer,
Don't cross post, answered in .server.
You really MUST read this page:
http://www.aspfaq.com/5003
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company networ
k.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>
Saturday, February 25, 2012
Publish Sql on the internet
Hi,
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!
Tomer,
I had a bit of trouble understanding what you are asking, I will recap.
You have a corporate network connected to the internet via a proxy
server (let's call this PROXY1). You want to "publish" your computer on
the internet, which resides behind PROXY1. What do you mean by
"publish"? Is it a web site, an FTP site, a database, remote desktop
connection, what?
You are running SQL Server on "my computer". Is this in the corporate
network or on the internet at home? Please clarify these points very
carefully (take a bit of time) as they will have a significant bearing
on the accuracy of the responses you will get.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company network.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>
|||Hi,
My computer is part of the company computer network and connects to the
internet through the company server which connects to the internet with an
adsl modem installed on it.
I have a sql server 2000 installed on my computer and I wish to access it
from 'outside' through the internet and access its databases.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> Tomer,
> I had a bit of trouble understanding what you are asking, I will recap.
> You have a corporate network connected to the internet via a proxy
> server (let's call this PROXY1). You want to "publish" your computer on
> the internet, which resides behind PROXY1. What do you mean by
> "publish"? Is it a web site, an FTP site, a database, remote desktop
> connection, what?
> You are running SQL Server on "my computer". Is this in the corporate
> network or on the internet at home? Please clarify these points very
> carefully (take a bit of time) as they will have a significant bearing
> on the accuracy of the responses you will get.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
network.[vbcol=seagreen]
the[vbcol=seagreen]
|||Tomer,
You will need to use NAT to allow your computer to act as a server. I
would only do this sort of thing at home and never on a corporate network.
On a corporate network you should have a demilitarised zone (DMZ) that
allows incoming connections from the internet. I really do not recommend
allow people from the public internet to connect directly to your LAN,
you are asking for trouble. The DMZ should not be able to initiate
connections to your LAN.
I would go further and not even allow any form of direct access to a
database server from the internet. Use a web server in a DMZ to connect
to your db server (also in a separate DMZ) to serve information. If you
need to manage a SQL Server from the internet you could use the web
administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
(http://www.mylittletools.net).
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> My computer is part of the company computer network and connects to the
> internet through the company server which connects to the internet with an
> adsl modem installed on it.
> I have a sql server 2000 installed on my computer and I wish to access it
> from 'outside' through the internet and access its databases.
>
> "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
>
> network.
>
> the
>
>
|||Hi,
First thing, thanks alot for the info! I know that this is a problematic
issue in security, but I need to connect a pocket pc device with a gprs
modem directly to the sql server, and I'd rather not use a web service
application.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:OOIKLZsfEHA.1424@.tk2msftngp13.phx.gbl...[vbcol=seagreen]
> Tomer,
> You will need to use NAT to allow your computer to act as a server. I
> would only do this sort of thing at home and never on a corporate network.
> On a corporate network you should have a demilitarised zone (DMZ) that
> allows incoming connections from the internet. I really do not recommend
> allow people from the public internet to connect directly to your LAN,
> you are asking for trouble. The DMZ should not be able to initiate
> connections to your LAN.
> I would go further and not even allow any form of direct access to a
> database server from the internet. Use a web server in a DMZ to connect
> to your db server (also in a separate DMZ) to serve information. If you
> need to manage a SQL Server from the internet you could use the web
> administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
> (http://www.mylittletools.net).
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
an[vbcol=seagreen]
it[vbcol=seagreen]
|||OK,
What you need to do is NOT allow connections into your LAN. Create a DMZ
and place the SQL Server there. Do not allow the DMZ to initiate
connections into the LAN. Only allow connections from the LAN TO the DMZ.
Do not allow SQL Server to connect to anything else on your network.
Remember, if this machine is compromised, you could be in trouble. On
the firewall, only open one port to the SQL Server, and make sure this
is not 1433. Make it a high port number such as 56378 (or whatever).
Ensure SQL Server is listening on this port.
This will put you out of range of port scanners that are only looking
for common ports such as 139, 1433, etc, however will not protect you
from someone scanning every port on your machine, but then there are
intrusion detection tools available to protect you from this.
Another way to do this is to use a VPN tunnel from the client on the
internet, through a VPN server in a DMZ on your corporate network, and
then you can use the entire LAN. This might be easier to set up and
configure, then again it might not.
Whatever you do, do not allow direct connections from the public
internet, unencrypted into your LAN.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> First thing, thanks alot for the info! I know that this is a problematic
> issue in security, but I need to connect a pocket pc device with a gprs
> modem directly to the sql server, and I'd rather not use a web service
> application.
>
|||Thanks a bunch!! this helps alot
Tomer.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:u$IWGX4fEHA.632@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> OK,
> What you need to do is NOT allow connections into your LAN. Create a DMZ
> and place the SQL Server there. Do not allow the DMZ to initiate
> connections into the LAN. Only allow connections from the LAN TO the DMZ.
> Do not allow SQL Server to connect to anything else on your network.
> Remember, if this machine is compromised, you could be in trouble. On
> the firewall, only open one port to the SQL Server, and make sure this
> is not 1433. Make it a high port number such as 56378 (or whatever).
> Ensure SQL Server is listening on this port.
> This will put you out of range of port scanners that are only looking
> for common ports such as 139, 1433, etc, however will not protect you
> from someone scanning every port on your machine, but then there are
> intrusion detection tools available to protect you from this.
> Another way to do this is to use a VPN tunnel from the client on the
> internet, through a VPN server in a DMZ on your corporate network, and
> then you can use the entire LAN. This might be easier to set up and
> configure, then again it might not.
> Whatever you do, do not allow direct connections from the public
> internet, unencrypted into your LAN.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!
Tomer,
I had a bit of trouble understanding what you are asking, I will recap.
You have a corporate network connected to the internet via a proxy
server (let's call this PROXY1). You want to "publish" your computer on
the internet, which resides behind PROXY1. What do you mean by
"publish"? Is it a web site, an FTP site, a database, remote desktop
connection, what?
You are running SQL Server on "my computer". Is this in the corporate
network or on the internet at home? Please clarify these points very
carefully (take a bit of time) as they will have a significant bearing
on the accuracy of the responses you will get.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company network.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>
|||Hi,
My computer is part of the company computer network and connects to the
internet through the company server which connects to the internet with an
adsl modem installed on it.
I have a sql server 2000 installed on my computer and I wish to access it
from 'outside' through the internet and access its databases.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> Tomer,
> I had a bit of trouble understanding what you are asking, I will recap.
> You have a corporate network connected to the internet via a proxy
> server (let's call this PROXY1). You want to "publish" your computer on
> the internet, which resides behind PROXY1. What do you mean by
> "publish"? Is it a web site, an FTP site, a database, remote desktop
> connection, what?
> You are running SQL Server on "my computer". Is this in the corporate
> network or on the internet at home? Please clarify these points very
> carefully (take a bit of time) as they will have a significant bearing
> on the accuracy of the responses you will get.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
network.[vbcol=seagreen]
the[vbcol=seagreen]
|||Tomer,
You will need to use NAT to allow your computer to act as a server. I
would only do this sort of thing at home and never on a corporate network.
On a corporate network you should have a demilitarised zone (DMZ) that
allows incoming connections from the internet. I really do not recommend
allow people from the public internet to connect directly to your LAN,
you are asking for trouble. The DMZ should not be able to initiate
connections to your LAN.
I would go further and not even allow any form of direct access to a
database server from the internet. Use a web server in a DMZ to connect
to your db server (also in a separate DMZ) to serve information. If you
need to manage a SQL Server from the internet you could use the web
administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
(http://www.mylittletools.net).
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> My computer is part of the company computer network and connects to the
> internet through the company server which connects to the internet with an
> adsl modem installed on it.
> I have a sql server 2000 installed on my computer and I wish to access it
> from 'outside' through the internet and access its databases.
>
> "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
>
> network.
>
> the
>
>
|||Hi,
First thing, thanks alot for the info! I know that this is a problematic
issue in security, but I need to connect a pocket pc device with a gprs
modem directly to the sql server, and I'd rather not use a web service
application.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:OOIKLZsfEHA.1424@.tk2msftngp13.phx.gbl...[vbcol=seagreen]
> Tomer,
> You will need to use NAT to allow your computer to act as a server. I
> would only do this sort of thing at home and never on a corporate network.
> On a corporate network you should have a demilitarised zone (DMZ) that
> allows incoming connections from the internet. I really do not recommend
> allow people from the public internet to connect directly to your LAN,
> you are asking for trouble. The DMZ should not be able to initiate
> connections to your LAN.
> I would go further and not even allow any form of direct access to a
> database server from the internet. Use a web server in a DMZ to connect
> to your db server (also in a separate DMZ) to serve information. If you
> need to manage a SQL Server from the internet you could use the web
> administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
> (http://www.mylittletools.net).
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
an[vbcol=seagreen]
it[vbcol=seagreen]
|||OK,
What you need to do is NOT allow connections into your LAN. Create a DMZ
and place the SQL Server there. Do not allow the DMZ to initiate
connections into the LAN. Only allow connections from the LAN TO the DMZ.
Do not allow SQL Server to connect to anything else on your network.
Remember, if this machine is compromised, you could be in trouble. On
the firewall, only open one port to the SQL Server, and make sure this
is not 1433. Make it a high port number such as 56378 (or whatever).
Ensure SQL Server is listening on this port.
This will put you out of range of port scanners that are only looking
for common ports such as 139, 1433, etc, however will not protect you
from someone scanning every port on your machine, but then there are
intrusion detection tools available to protect you from this.
Another way to do this is to use a VPN tunnel from the client on the
internet, through a VPN server in a DMZ on your corporate network, and
then you can use the entire LAN. This might be easier to set up and
configure, then again it might not.
Whatever you do, do not allow direct connections from the public
internet, unencrypted into your LAN.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> First thing, thanks alot for the info! I know that this is a problematic
> issue in security, but I need to connect a pocket pc device with a gprs
> modem directly to the sql server, and I'd rather not use a web service
> application.
>
|||Thanks a bunch!! this helps alot
Tomer.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:u$IWGX4fEHA.632@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> OK,
> What you need to do is NOT allow connections into your LAN. Create a DMZ
> and place the SQL Server there. Do not allow the DMZ to initiate
> connections into the LAN. Only allow connections from the LAN TO the DMZ.
> Do not allow SQL Server to connect to anything else on your network.
> Remember, if this machine is compromised, you could be in trouble. On
> the firewall, only open one port to the SQL Server, and make sure this
> is not 1433. Make it a high port number such as 56378 (or whatever).
> Ensure SQL Server is listening on this port.
> This will put you out of range of port scanners that are only looking
> for common ports such as 139, 1433, etc, however will not protect you
> from someone scanning every port on your machine, but then there are
> intrusion detection tools available to protect you from this.
> Another way to do this is to use a VPN tunnel from the client on the
> internet, through a VPN server in a DMZ on your corporate network, and
> then you can use the entire LAN. This might be easier to set up and
> configure, then again it might not.
> Whatever you do, do not allow direct connections from the public
> internet, unencrypted into your LAN.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
Publish Sql on the internet
Hi,
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!Tomer,
I had a bit of trouble understanding what you are asking, I will recap.
You have a corporate network connected to the internet via a proxy
server (let's call this PROXY1). You want to "publish" your computer on
the internet, which resides behind PROXY1. What do you mean by
"publish"? Is it a web site, an FTP site, a database, remote desktop
connection, what?
You are running SQL Server on "my computer". Is this in the corporate
network or on the internet at home? Please clarify these points very
carefully (take a bit of time) as they will have a significant bearing
on the accuracy of the responses you will get.
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company networ
k.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>|||Hi,
My computer is part of the company computer network and connects to the
internet through the company server which connects to the internet with an
adsl modem installed on it.
I have a sql server 2000 installed on my computer and I wish to access it
from 'outside' through the internet and access its databases.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> Tomer,
> I had a bit of trouble understanding what you are asking, I will recap.
> You have a corporate network connected to the internet via a proxy
> server (let's call this PROXY1). You want to "publish" your computer on
> the internet, which resides behind PROXY1. What do you mean by
> "publish"? Is it a web site, an FTP site, a database, remote desktop
> connection, what?
> You are running SQL Server on "my computer". Is this in the corporate
> network or on the internet at home? Please clarify these points very
> carefully (take a bit of time) as they will have a significant bearing
> on the accuracy of the responses you will get.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
network.[vbcol=seagreen]
the[vbcol=seagreen]|||Tomer,
You will need to use NAT to allow your computer to act as a server. I
would only do this sort of thing at home and never on a corporate network.
On a corporate network you should have a demilitarised zone (DMZ) that
allows incoming connections from the internet. I really do not recommend
allow people from the public internet to connect directly to your LAN,
you are asking for trouble. The DMZ should not be able to initiate
connections to your LAN.
I would go further and not even allow any form of direct access to a
database server from the internet. Use a web server in a DMZ to connect
to your db server (also in a separate DMZ) to serve information. If you
need to manage a SQL Server from the internet you could use the web
administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
(http://www.mylittletools.net).
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> My computer is part of the company computer network and connects to the
> internet through the company server which connects to the internet with an
> adsl modem installed on it.
> I have a sql server 2000 installed on my computer and I wish to access it
> from 'outside' through the internet and access its databases.
>
> "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
>
> network.
>
> the
>
>
>|||Hi,
First thing, thanks alot for the info! I know that this is a problematic
issue in security, but I need to connect a pocket pc device with a gprs
modem directly to the sql server, and I'd rather not use a web service
application.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:OOIKLZsfEHA.1424@.tk2msftngp13.phx.gbl...[vbcol=seagreen]
> Tomer,
> You will need to use NAT to allow your computer to act as a server. I
> would only do this sort of thing at home and never on a corporate network.
> On a corporate network you should have a demilitarised zone (DMZ) that
> allows incoming connections from the internet. I really do not recommend
> allow people from the public internet to connect directly to your LAN,
> you are asking for trouble. The DMZ should not be able to initiate
> connections to your LAN.
> I would go further and not even allow any form of direct access to a
> database server from the internet. Use a web server in a DMZ to connect
> to your db server (also in a separate DMZ) to serve information. If you
> need to manage a SQL Server from the internet you could use the web
> administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
> (http://www.mylittletools.net).
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
an[vbcol=seagreen]
it[vbcol=seagreen]|||OK,
What you need to do is NOT allow connections into your LAN. Create a DMZ
and place the SQL Server there. Do not allow the DMZ to initiate
connections into the LAN. Only allow connections from the LAN TO the DMZ.
Do not allow SQL Server to connect to anything else on your network.
Remember, if this machine is compromised, you could be in trouble. On
the firewall, only open one port to the SQL Server, and make sure this
is not 1433. Make it a high port number such as 56378 (or whatever).
Ensure SQL Server is listening on this port.
This will put you out of range of port scanners that are only looking
for common ports such as 139, 1433, etc, however will not protect you
from someone scanning every port on your machine, but then there are
intrusion detection tools available to protect you from this.
Another way to do this is to use a VPN tunnel from the client on the
internet, through a VPN server in a DMZ on your corporate network, and
then you can use the entire LAN. This might be easier to set up and
configure, then again it might not.
Whatever you do, do not allow direct connections from the public
internet, unencrypted into your LAN.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> First thing, thanks alot for the info! I know that this is a problematic
> issue in security, but I need to connect a pocket pc device with a gprs
> modem directly to the sql server, and I'd rather not use a web service
> application.
>|||Thanks a bunch!! this helps alot
Tomer.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:u$IWGX4fEHA.632@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> OK,
> What you need to do is NOT allow connections into your LAN. Create a DMZ
> and place the SQL Server there. Do not allow the DMZ to initiate
> connections into the LAN. Only allow connections from the LAN TO the DMZ.
> Do not allow SQL Server to connect to anything else on your network.
> Remember, if this machine is compromised, you could be in trouble. On
> the firewall, only open one port to the SQL Server, and make sure this
> is not 1433. Make it a high port number such as 56378 (or whatever).
> Ensure SQL Server is listening on this port.
> This will put you out of range of port scanners that are only looking
> for common ports such as 139, 1433, etc, however will not protect you
> from someone scanning every port on your machine, but then there are
> intrusion detection tools available to protect you from this.
> Another way to do this is to use a VPN tunnel from the client on the
> internet, through a VPN server in a DMZ on your corporate network, and
> then you can use the entire LAN. This might be easier to set up and
> configure, then again it might not.
> Whatever you do, do not allow direct connections from the public
> internet, unencrypted into your LAN.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!Tomer,
I had a bit of trouble understanding what you are asking, I will recap.
You have a corporate network connected to the internet via a proxy
server (let's call this PROXY1). You want to "publish" your computer on
the internet, which resides behind PROXY1. What do you mean by
"publish"? Is it a web site, an FTP site, a database, remote desktop
connection, what?
You are running SQL Server on "my computer". Is this in the corporate
network or on the internet at home? Please clarify these points very
carefully (take a bit of time) as they will have a significant bearing
on the accuracy of the responses you will get.
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company networ
k.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>|||Hi,
My computer is part of the company computer network and connects to the
internet through the company server which connects to the internet with an
adsl modem installed on it.
I have a sql server 2000 installed on my computer and I wish to access it
from 'outside' through the internet and access its databases.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> Tomer,
> I had a bit of trouble understanding what you are asking, I will recap.
> You have a corporate network connected to the internet via a proxy
> server (let's call this PROXY1). You want to "publish" your computer on
> the internet, which resides behind PROXY1. What do you mean by
> "publish"? Is it a web site, an FTP site, a database, remote desktop
> connection, what?
> You are running SQL Server on "my computer". Is this in the corporate
> network or on the internet at home? Please clarify these points very
> carefully (take a bit of time) as they will have a significant bearing
> on the accuracy of the responses you will get.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
network.[vbcol=seagreen]
the[vbcol=seagreen]|||Tomer,
You will need to use NAT to allow your computer to act as a server. I
would only do this sort of thing at home and never on a corporate network.
On a corporate network you should have a demilitarised zone (DMZ) that
allows incoming connections from the internet. I really do not recommend
allow people from the public internet to connect directly to your LAN,
you are asking for trouble. The DMZ should not be able to initiate
connections to your LAN.
I would go further and not even allow any form of direct access to a
database server from the internet. Use a web server in a DMZ to connect
to your db server (also in a separate DMZ) to serve information. If you
need to manage a SQL Server from the internet you could use the web
administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
(http://www.mylittletools.net).
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> My computer is part of the company computer network and connects to the
> internet through the company server which connects to the internet with an
> adsl modem installed on it.
> I have a sql server 2000 installed on my computer and I wish to access it
> from 'outside' through the internet and access its databases.
>
> "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
>
> network.
>
> the
>
>
>|||Hi,
First thing, thanks alot for the info! I know that this is a problematic
issue in security, but I need to connect a pocket pc device with a gprs
modem directly to the sql server, and I'd rather not use a web service
application.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:OOIKLZsfEHA.1424@.tk2msftngp13.phx.gbl...[vbcol=seagreen]
> Tomer,
> You will need to use NAT to allow your computer to act as a server. I
> would only do this sort of thing at home and never on a corporate network.
> On a corporate network you should have a demilitarised zone (DMZ) that
> allows incoming connections from the internet. I really do not recommend
> allow people from the public internet to connect directly to your LAN,
> you are asking for trouble. The DMZ should not be able to initiate
> connections to your LAN.
> I would go further and not even allow any form of direct access to a
> database server from the internet. Use a web server in a DMZ to connect
> to your db server (also in a separate DMZ) to serve information. If you
> need to manage a SQL Server from the internet you could use the web
> administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
> (http://www.mylittletools.net).
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
an[vbcol=seagreen]
it[vbcol=seagreen]|||OK,
What you need to do is NOT allow connections into your LAN. Create a DMZ
and place the SQL Server there. Do not allow the DMZ to initiate
connections into the LAN. Only allow connections from the LAN TO the DMZ.
Do not allow SQL Server to connect to anything else on your network.
Remember, if this machine is compromised, you could be in trouble. On
the firewall, only open one port to the SQL Server, and make sure this
is not 1433. Make it a high port number such as 56378 (or whatever).
Ensure SQL Server is listening on this port.
This will put you out of range of port scanners that are only looking
for common ports such as 139, 1433, etc, however will not protect you
from someone scanning every port on your machine, but then there are
intrusion detection tools available to protect you from this.
Another way to do this is to use a VPN tunnel from the client on the
internet, through a VPN server in a DMZ on your corporate network, and
then you can use the entire LAN. This might be easier to set up and
configure, then again it might not.
Whatever you do, do not allow direct connections from the public
internet, unencrypted into your LAN.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> First thing, thanks alot for the info! I know that this is a problematic
> issue in security, but I need to connect a pocket pc device with a gprs
> modem directly to the sql server, and I'd rather not use a web service
> application.
>|||Thanks a bunch!! this helps alot
Tomer.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:u$IWGX4fEHA.632@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> OK,
> What you need to do is NOT allow connections into your LAN. Create a DMZ
> and place the SQL Server there. Do not allow the DMZ to initiate
> connections into the LAN. Only allow connections from the LAN TO the DMZ.
> Do not allow SQL Server to connect to anything else on your network.
> Remember, if this machine is compromised, you could be in trouble. On
> the firewall, only open one port to the SQL Server, and make sure this
> is not 1433. Make it a high port number such as 56378 (or whatever).
> Ensure SQL Server is listening on this port.
> This will put you out of range of port scanners that are only looking
> for common ports such as 139, 1433, etc, however will not protect you
> from someone scanning every port on your machine, but then there are
> intrusion detection tools available to protect you from this.
> Another way to do this is to use a VPN tunnel from the client on the
> internet, through a VPN server in a DMZ on your corporate network, and
> then you can use the entire LAN. This might be easier to set up and
> configure, then again it might not.
> Whatever you do, do not allow direct connections from the public
> internet, unencrypted into your LAN.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
Publish Sql on the internet
Hi,
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!Tomer,
I had a bit of trouble understanding what you are asking, I will recap.
You have a corporate network connected to the internet via a proxy
server (let's call this PROXY1). You want to "publish" your computer on
the internet, which resides behind PROXY1. What do you mean by
"publish"? Is it a web site, an FTP site, a database, remote desktop
connection, what?
You are running SQL Server on "my computer". Is this in the corporate
network or on the internet at home? Please clarify these points very
carefully (take a bit of time) as they will have a significant bearing
on the accuracy of the responses you will get.
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company network.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>|||Hi,
My computer is part of the company computer network and connects to the
internet through the company server which connects to the internet with an
adsl modem installed on it.
I have a sql server 2000 installed on my computer and I wish to access it
from 'outside' through the internet and access its databases.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
> Tomer,
> I had a bit of trouble understanding what you are asking, I will recap.
> You have a corporate network connected to the internet via a proxy
> server (let's call this PROXY1). You want to "publish" your computer on
> the internet, which resides behind PROXY1. What do you mean by
> "publish"? Is it a web site, an FTP site, a database, remote desktop
> connection, what?
> You are running SQL Server on "my computer". Is this in the corporate
> network or on the internet at home? Please clarify these points very
> carefully (take a bit of time) as they will have a significant bearing
> on the accuracy of the responses you will get.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
> > Hi,
> > I need to publish my computer on the internet which is on a company
network.
> > in the network we have a server that connects to the internet and gives
> > internet access to all the company computers.
> > I'm running a sql server on my compuer and I need to access it through
the
> > internet.
> > Also, I need to know how do I secure the connection to my
> > server/computer/company.
> >
> > Any info on this would be great!!
> >
> >|||Tomer,
You will need to use NAT to allow your computer to act as a server. I
would only do this sort of thing at home and never on a corporate network.
On a corporate network you should have a demilitarised zone (DMZ) that
allows incoming connections from the internet. I really do not recommend
allow people from the public internet to connect directly to your LAN,
you are asking for trouble. The DMZ should not be able to initiate
connections to your LAN.
I would go further and not even allow any form of direct access to a
database server from the internet. Use a web server in a DMZ to connect
to your db server (also in a separate DMZ) to serve information. If you
need to manage a SQL Server from the internet you could use the web
administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
(http://www.mylittletools.net).
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> My computer is part of the company computer network and connects to the
> internet through the company server which connects to the internet with an
> adsl modem installed on it.
> I have a sql server 2000 installed on my computer and I wish to access it
> from 'outside' through the internet and access its databases.
>
> "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
>>Tomer,
>>I had a bit of trouble understanding what you are asking, I will recap.
>>You have a corporate network connected to the internet via a proxy
>>server (let's call this PROXY1). You want to "publish" your computer on
>>the internet, which resides behind PROXY1. What do you mean by
>>"publish"? Is it a web site, an FTP site, a database, remote desktop
>>connection, what?
>>You are running SQL Server on "my computer". Is this in the corporate
>>network or on the internet at home? Please clarify these points very
>>carefully (take a bit of time) as they will have a significant bearing
>>on the accuracy of the responses you will get.
>>--
>>Mark Allison, SQL Server MVP
>>http://www.markallison.co.uk
>>Looking for a SQL Server replication book?
>>http://www.nwsu.com/0974973602.html
>>
>>Tomer wrote:
>>Hi,
>>I need to publish my computer on the internet which is on a company
> network.
>>in the network we have a server that connects to the internet and gives
>>internet access to all the company computers.
>>I'm running a sql server on my compuer and I need to access it through
> the
>>internet.
>>Also, I need to know how do I secure the connection to my
>>server/computer/company.
>>Any info on this would be great!!
>>
>
>|||Hi,
First thing, thanks alot for the info! I know that this is a problematic
issue in security, but I need to connect a pocket pc device with a gprs
modem directly to the sql server, and I'd rather not use a web service
application.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:OOIKLZsfEHA.1424@.tk2msftngp13.phx.gbl...
> Tomer,
> You will need to use NAT to allow your computer to act as a server. I
> would only do this sort of thing at home and never on a corporate network.
> On a corporate network you should have a demilitarised zone (DMZ) that
> allows incoming connections from the internet. I really do not recommend
> allow people from the public internet to connect directly to your LAN,
> you are asking for trouble. The DMZ should not be able to initiate
> connections to your LAN.
> I would go further and not even allow any form of direct access to a
> database server from the internet. Use a web server in a DMZ to connect
> to your db server (also in a separate DMZ) to serve information. If you
> need to manage a SQL Server from the internet you could use the web
> administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
> (http://www.mylittletools.net).
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
> > Hi,
> >
> > My computer is part of the company computer network and connects to the
> > internet through the company server which connects to the internet with
an
> > adsl modem installed on it.
> > I have a sql server 2000 installed on my computer and I wish to access
it
> > from 'outside' through the internet and access its databases.
> >
> >
> > "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> > news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
> >
> >>Tomer,
> >>
> >>I had a bit of trouble understanding what you are asking, I will recap.
> >>You have a corporate network connected to the internet via a proxy
> >>server (let's call this PROXY1). You want to "publish" your computer on
> >>the internet, which resides behind PROXY1. What do you mean by
> >>"publish"? Is it a web site, an FTP site, a database, remote desktop
> >>connection, what?
> >>
> >>You are running SQL Server on "my computer". Is this in the corporate
> >>network or on the internet at home? Please clarify these points very
> >>carefully (take a bit of time) as they will have a significant bearing
> >>on the accuracy of the responses you will get.
> >>--
> >>Mark Allison, SQL Server MVP
> >>http://www.markallison.co.uk
> >>
> >>Looking for a SQL Server replication book?
> >>http://www.nwsu.com/0974973602.html
> >>
> >>
> >>
> >>Tomer wrote:
> >>
> >>Hi,
> >>I need to publish my computer on the internet which is on a company
> >
> > network.
> >
> >>in the network we have a server that connects to the internet and gives
> >>internet access to all the company computers.
> >>I'm running a sql server on my compuer and I need to access it through
> >
> > the
> >
> >>internet.
> >>Also, I need to know how do I secure the connection to my
> >>server/computer/company.
> >>
> >>Any info on this would be great!!
> >>
> >>
> >
> >
> >|||OK,
What you need to do is NOT allow connections into your LAN. Create a DMZ
and place the SQL Server there. Do not allow the DMZ to initiate
connections into the LAN. Only allow connections from the LAN TO the DMZ.
Do not allow SQL Server to connect to anything else on your network.
Remember, if this machine is compromised, you could be in trouble. On
the firewall, only open one port to the SQL Server, and make sure this
is not 1433. Make it a high port number such as 56378 (or whatever).
Ensure SQL Server is listening on this port.
This will put you out of range of port scanners that are only looking
for common ports such as 139, 1433, etc, however will not protect you
from someone scanning every port on your machine, but then there are
intrusion detection tools available to protect you from this.
Another way to do this is to use a VPN tunnel from the client on the
internet, through a VPN server in a DMZ on your corporate network, and
then you can use the entire LAN. This might be easier to set up and
configure, then again it might not.
Whatever you do, do not allow direct connections from the public
internet, unencrypted into your LAN.
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> First thing, thanks alot for the info! I know that this is a problematic
> issue in security, but I need to connect a pocket pc device with a gprs
> modem directly to the sql server, and I'd rather not use a web service
> application.
>|||Thanks a bunch!! this helps alot
Tomer.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:u$IWGX4fEHA.632@.TK2MSFTNGP12.phx.gbl...
> OK,
> What you need to do is NOT allow connections into your LAN. Create a DMZ
> and place the SQL Server there. Do not allow the DMZ to initiate
> connections into the LAN. Only allow connections from the LAN TO the DMZ.
> Do not allow SQL Server to connect to anything else on your network.
> Remember, if this machine is compromised, you could be in trouble. On
> the firewall, only open one port to the SQL Server, and make sure this
> is not 1433. Make it a high port number such as 56378 (or whatever).
> Ensure SQL Server is listening on this port.
> This will put you out of range of port scanners that are only looking
> for common ports such as 139, 1433, etc, however will not protect you
> from someone scanning every port on your machine, but then there are
> intrusion detection tools available to protect you from this.
> Another way to do this is to use a VPN tunnel from the client on the
> internet, through a VPN server in a DMZ on your corporate network, and
> then you can use the entire LAN. This might be easier to set up and
> configure, then again it might not.
> Whatever you do, do not allow direct connections from the public
> internet, unencrypted into your LAN.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
> > Hi,
> >
> > First thing, thanks alot for the info! I know that this is a problematic
> > issue in security, but I need to connect a pocket pc device with a gprs
> > modem directly to the sql server, and I'd rather not use a web service
> > application.
> >
I need to publish my computer on the internet which is on a company network.
in the network we have a server that connects to the internet and gives
internet access to all the company computers.
I'm running a sql server on my compuer and I need to access it through the
internet.
Also, I need to know how do I secure the connection to my
server/computer/company.
Any info on this would be great!!Tomer,
I had a bit of trouble understanding what you are asking, I will recap.
You have a corporate network connected to the internet via a proxy
server (let's call this PROXY1). You want to "publish" your computer on
the internet, which resides behind PROXY1. What do you mean by
"publish"? Is it a web site, an FTP site, a database, remote desktop
connection, what?
You are running SQL Server on "my computer". Is this in the corporate
network or on the internet at home? Please clarify these points very
carefully (take a bit of time) as they will have a significant bearing
on the accuracy of the responses you will get.
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> I need to publish my computer on the internet which is on a company network.
> in the network we have a server that connects to the internet and gives
> internet access to all the company computers.
> I'm running a sql server on my compuer and I need to access it through the
> internet.
> Also, I need to know how do I secure the connection to my
> server/computer/company.
> Any info on this would be great!!
>|||Hi,
My computer is part of the company computer network and connects to the
internet through the company server which connects to the internet with an
adsl modem installed on it.
I have a sql server 2000 installed on my computer and I wish to access it
from 'outside' through the internet and access its databases.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
> Tomer,
> I had a bit of trouble understanding what you are asking, I will recap.
> You have a corporate network connected to the internet via a proxy
> server (let's call this PROXY1). You want to "publish" your computer on
> the internet, which resides behind PROXY1. What do you mean by
> "publish"? Is it a web site, an FTP site, a database, remote desktop
> connection, what?
> You are running SQL Server on "my computer". Is this in the corporate
> network or on the internet at home? Please clarify these points very
> carefully (take a bit of time) as they will have a significant bearing
> on the accuracy of the responses you will get.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
> > Hi,
> > I need to publish my computer on the internet which is on a company
network.
> > in the network we have a server that connects to the internet and gives
> > internet access to all the company computers.
> > I'm running a sql server on my compuer and I need to access it through
the
> > internet.
> > Also, I need to know how do I secure the connection to my
> > server/computer/company.
> >
> > Any info on this would be great!!
> >
> >|||Tomer,
You will need to use NAT to allow your computer to act as a server. I
would only do this sort of thing at home and never on a corporate network.
On a corporate network you should have a demilitarised zone (DMZ) that
allows incoming connections from the internet. I really do not recommend
allow people from the public internet to connect directly to your LAN,
you are asking for trouble. The DMZ should not be able to initiate
connections to your LAN.
I would go further and not even allow any form of direct access to a
database server from the internet. Use a web server in a DMZ to connect
to your db server (also in a separate DMZ) to serve information. If you
need to manage a SQL Server from the internet you could use the web
administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
(http://www.mylittletools.net).
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> My computer is part of the company computer network and connects to the
> internet through the company server which connects to the internet with an
> adsl modem installed on it.
> I have a sql server 2000 installed on my computer and I wish to access it
> from 'outside' through the internet and access its databases.
>
> "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
>>Tomer,
>>I had a bit of trouble understanding what you are asking, I will recap.
>>You have a corporate network connected to the internet via a proxy
>>server (let's call this PROXY1). You want to "publish" your computer on
>>the internet, which resides behind PROXY1. What do you mean by
>>"publish"? Is it a web site, an FTP site, a database, remote desktop
>>connection, what?
>>You are running SQL Server on "my computer". Is this in the corporate
>>network or on the internet at home? Please clarify these points very
>>carefully (take a bit of time) as they will have a significant bearing
>>on the accuracy of the responses you will get.
>>--
>>Mark Allison, SQL Server MVP
>>http://www.markallison.co.uk
>>Looking for a SQL Server replication book?
>>http://www.nwsu.com/0974973602.html
>>
>>Tomer wrote:
>>Hi,
>>I need to publish my computer on the internet which is on a company
> network.
>>in the network we have a server that connects to the internet and gives
>>internet access to all the company computers.
>>I'm running a sql server on my compuer and I need to access it through
> the
>>internet.
>>Also, I need to know how do I secure the connection to my
>>server/computer/company.
>>Any info on this would be great!!
>>
>
>|||Hi,
First thing, thanks alot for the info! I know that this is a problematic
issue in security, but I need to connect a pocket pc device with a gprs
modem directly to the sql server, and I'd rather not use a web service
application.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:OOIKLZsfEHA.1424@.tk2msftngp13.phx.gbl...
> Tomer,
> You will need to use NAT to allow your computer to act as a server. I
> would only do this sort of thing at home and never on a corporate network.
> On a corporate network you should have a demilitarised zone (DMZ) that
> allows incoming connections from the internet. I really do not recommend
> allow people from the public internet to connect directly to your LAN,
> you are asking for trouble. The DMZ should not be able to initiate
> connections to your LAN.
> I would go further and not even allow any form of direct access to a
> database server from the internet. Use a web server in a DMZ to connect
> to your db server (also in a separate DMZ) to serve information. If you
> need to manage a SQL Server from the internet you could use the web
> administrator (http://tinyurl.com/3cuzt) or even MyLittleTools
> (http://www.mylittletools.net).
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
> > Hi,
> >
> > My computer is part of the company computer network and connects to the
> > internet through the company server which connects to the internet with
an
> > adsl modem installed on it.
> > I have a sql server 2000 installed on my computer and I wish to access
it
> > from 'outside' through the internet and access its databases.
> >
> >
> > "Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
> > news:eaZoMCsfEHA.140@.TK2MSFTNGP12.phx.gbl...
> >
> >>Tomer,
> >>
> >>I had a bit of trouble understanding what you are asking, I will recap.
> >>You have a corporate network connected to the internet via a proxy
> >>server (let's call this PROXY1). You want to "publish" your computer on
> >>the internet, which resides behind PROXY1. What do you mean by
> >>"publish"? Is it a web site, an FTP site, a database, remote desktop
> >>connection, what?
> >>
> >>You are running SQL Server on "my computer". Is this in the corporate
> >>network or on the internet at home? Please clarify these points very
> >>carefully (take a bit of time) as they will have a significant bearing
> >>on the accuracy of the responses you will get.
> >>--
> >>Mark Allison, SQL Server MVP
> >>http://www.markallison.co.uk
> >>
> >>Looking for a SQL Server replication book?
> >>http://www.nwsu.com/0974973602.html
> >>
> >>
> >>
> >>Tomer wrote:
> >>
> >>Hi,
> >>I need to publish my computer on the internet which is on a company
> >
> > network.
> >
> >>in the network we have a server that connects to the internet and gives
> >>internet access to all the company computers.
> >>I'm running a sql server on my compuer and I need to access it through
> >
> > the
> >
> >>internet.
> >>Also, I need to know how do I secure the connection to my
> >>server/computer/company.
> >>
> >>Any info on this would be great!!
> >>
> >>
> >
> >
> >|||OK,
What you need to do is NOT allow connections into your LAN. Create a DMZ
and place the SQL Server there. Do not allow the DMZ to initiate
connections into the LAN. Only allow connections from the LAN TO the DMZ.
Do not allow SQL Server to connect to anything else on your network.
Remember, if this machine is compromised, you could be in trouble. On
the firewall, only open one port to the SQL Server, and make sure this
is not 1433. Make it a high port number such as 56378 (or whatever).
Ensure SQL Server is listening on this port.
This will put you out of range of port scanners that are only looking
for common ports such as 139, 1433, etc, however will not protect you
from someone scanning every port on your machine, but then there are
intrusion detection tools available to protect you from this.
Another way to do this is to use a VPN tunnel from the client on the
internet, through a VPN server in a DMZ on your corporate network, and
then you can use the entire LAN. This might be easier to set up and
configure, then again it might not.
Whatever you do, do not allow direct connections from the public
internet, unencrypted into your LAN.
--
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Tomer wrote:
> Hi,
> First thing, thanks alot for the info! I know that this is a problematic
> issue in security, but I need to connect a pocket pc device with a gprs
> modem directly to the sql server, and I'd rather not use a web service
> application.
>|||Thanks a bunch!! this helps alot
Tomer.
"Mark Allison" <marka@.no.tinned.meat.mvps.org> wrote in message
news:u$IWGX4fEHA.632@.TK2MSFTNGP12.phx.gbl...
> OK,
> What you need to do is NOT allow connections into your LAN. Create a DMZ
> and place the SQL Server there. Do not allow the DMZ to initiate
> connections into the LAN. Only allow connections from the LAN TO the DMZ.
> Do not allow SQL Server to connect to anything else on your network.
> Remember, if this machine is compromised, you could be in trouble. On
> the firewall, only open one port to the SQL Server, and make sure this
> is not 1433. Make it a high port number such as 56378 (or whatever).
> Ensure SQL Server is listening on this port.
> This will put you out of range of port scanners that are only looking
> for common ports such as 139, 1433, etc, however will not protect you
> from someone scanning every port on your machine, but then there are
> intrusion detection tools available to protect you from this.
> Another way to do this is to use a VPN tunnel from the client on the
> internet, through a VPN server in a DMZ on your corporate network, and
> then you can use the entire LAN. This might be easier to set up and
> configure, then again it might not.
> Whatever you do, do not allow direct connections from the public
> internet, unencrypted into your LAN.
> --
> Mark Allison, SQL Server MVP
> http://www.markallison.co.uk
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Tomer wrote:
> > Hi,
> >
> > First thing, thanks alot for the info! I know that this is a problematic
> > issue in security, but I need to connect a pocket pc device with a gprs
> > modem directly to the sql server, and I'd rather not use a web service
> > application.
> >
Publication doesn't show
To try out replication I have installed several instances of SQL server on a
single computer. With one default server and one named server merge
replication with pull subscription works fine. When I try to add a pull
subscription to an additional named server however, the publication does not
show in the list.
I tried removing the subscription and publication. Then I added the
publication. This makes the publication visible from both named servers when
I use the pull subscription wizard. But when I finish the wizard to add a
pull subscription to any of the servers, this makes the publication not
appear when I try to create a pull subscription to the other server. If I
only delete the subscription (not the publication), the publication does not
show up from any of the named servers.
The publication is configured to allow anonymous subscriptions.
Additionally, I use the same password for the sa account on all servers, so I
think the publication should be accesible to the login used to connect to the
named servers. Any ideas why the publication does not show up in the pull
subscription wizard?
/Daniel
I still don't know what the problem was, but I worked around it by first
creating a push subscription to the server from which I wanted to create a
pull subscription. This, for some reason, made the publication visible in the
pull subscription wizard.
single computer. With one default server and one named server merge
replication with pull subscription works fine. When I try to add a pull
subscription to an additional named server however, the publication does not
show in the list.
I tried removing the subscription and publication. Then I added the
publication. This makes the publication visible from both named servers when
I use the pull subscription wizard. But when I finish the wizard to add a
pull subscription to any of the servers, this makes the publication not
appear when I try to create a pull subscription to the other server. If I
only delete the subscription (not the publication), the publication does not
show up from any of the named servers.
The publication is configured to allow anonymous subscriptions.
Additionally, I use the same password for the sa account on all servers, so I
think the publication should be accesible to the login used to connect to the
named servers. Any ideas why the publication does not show up in the pull
subscription wizard?
/Daniel
I still don't know what the problem was, but I worked around it by first
creating a push subscription to the server from which I wanted to create a
pull subscription. This, for some reason, made the publication visible in the
pull subscription wizard.
Subscribe to:
Posts (Atom)