I'm trying to implement an IPSec policy that will block all the inbout traffic to port TCP 1433 (sql server 2008), but I need to allow the server itself to be able to connect to that port.

I have been able to successfully create a BLOCK rule that prevents any incoming traffic to TCP port 1433. As soon as this rule is assigned, I can't connect to the sql server anymore from the server itself or from outside.

I know I need to add a PERMIT rule that would allow the server to connect, but it's not working. I've added to the permit list my home IP address and the server IP address, and then I can connect from my local computer but not from the server.

I must be doing something wrong, I know I'm close because when I set the BLOCK / PERMIT rules combo, all the incoming TCP 1433 is blocked but except that I can connect from my local computer.

What could I be doing wrong ?

Thanks for any suggestion. Cordially, Agustin.

link|improve this question
I came after reading this thread, which is pretty close but is not answering how can I allow the traffic from the server itself serverfault.com/questions/13416/… – Agustin Jul 13 '11 at 23:35
is there a way to bump this question to get some pointers ? – Agustin Jul 24 '11 at 13:09
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown

Browse other questions tagged or ask your own question.