I'm trying to implement an IPSec policy that will block all the inbout traffic to port TCP 1433 (sql server 2008), but I need to allow the server itself to be able to connect to that port.
I have been able to successfully create a BLOCK rule that prevents any incoming traffic to TCP port 1433. As soon as this rule is assigned, I can't connect to the sql server anymore from the server itself or from outside.
I know I need to add a PERMIT rule that would allow the server to connect, but it's not working. I've added to the permit list my home IP address and the server IP address, and then I can connect from my local computer but not from the server.
I must be doing something wrong, I know I'm close because when I set the BLOCK / PERMIT rules combo, all the incoming TCP 1433 is blocked but except that I can connect from my local computer.
What could I be doing wrong ?
Thanks for any suggestion. Cordially, Agustin.