up vote 0 down vote favorite
share [g+] share [fb]

We already use Hamachi to link our isolated servers together, but it is possible to restrict access to certain applications so that they can only be seen on the server or via Hamachi's VPN.

From our logs we can see "far eastern" probing of our SQL Server installations, and ideally we would like to restrict access to SQL Server boxes. We have a unsophisticated network topology of leased servers.

link|improve this question
feedback

2 Answers

up vote 1 down vote accepted

If this is running on a recent Windows Server version (preferably 2008 R2), then just use the windows firewall to deny access to your SQL ports except from the hamachi VPN IP addresses you need.

link|improve this answer
Thanks - yes I have come to the same conclusion – Eric Hewett Jan 17 at 12:54
feedback
up vote 0 down vote

This is why SQL Server's should never be exposed to the public Internet. Instead the SQL Server should be configured with private IPs which are not NAT'ed to a public IP.

Configure your routers or firewall and configure them to now allow any access from the outside world.

link|improve this answer
Thanks - It is an inherited system - which we are trying to modernise – Eric Hewett Jan 17 at 12:56
Sounds like there is probably a decent amount of stuff to fix. – mrdenny♦ Jan 17 at 21:17
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.