Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was wondering if it's possible to create a user (or modify an existing one) in Ms Sql server that can only connect to the DDBB using an internal IP and not an external IP. Something similar to Mysql, that allows you to specify the host. Sorry if it is a very easy question but I am not expert at all in SQL server!

share|improve this question

You'll need to clarify what you mean by "an internal IP".

If you mean, on the MS SQL box itself, this is trivial by only binding to localhost (

If you mean, from a list of allowed remote IPs - employ a firewall.

What on earth has possessed you to EVER open up MS SQL to an externally-reachable port.
It is the number one cause of hacked databases.

share|improve this answer
I mean an IP inside the LAN, for example 192.168.2.X. We were using a VPN connection to access those databases but the router stopped working and in the meantime we need to open the external connections – Curri Dec 19 '11 at 13:17
+1 for do not externally expose FW! – Anon246 Dec 19 '11 at 17:19

I would do that via Windows firewall. It should have a default rule for SQL Server (assuming you didn't turn the FW off. You can limit it to IP ranges, etc.

Thanks, Eric

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.