Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We already use Hamachi to link our isolated servers together, but it is possible to restrict access to certain applications so that they can only be seen on the server or via Hamachi's VPN.

From our logs we can see "far eastern" probing of our SQL Server installations, and ideally we would like to restrict access to SQL Server boxes. We have a unsophisticated network topology of leased servers.

share|improve this question
up vote 1 down vote accepted

If this is running on a recent Windows Server version (preferably 2008 R2), then just use the windows firewall to deny access to your SQL ports except from the hamachi VPN IP addresses you need.

share|improve this answer
Thanks - yes I have come to the same conclusion – Eric Hewett Jan 17 '12 at 12:54

This is why SQL Server's should never be exposed to the public Internet. Instead the SQL Server should be configured with private IPs which are not NAT'ed to a public IP.

Configure your routers or firewall and configure them to now allow any access from the outside world.

share|improve this answer
Thanks - It is an inherited system - which we are trying to modernise – Eric Hewett Jan 17 '12 at 12:56
Sounds like there is probably a decent amount of stuff to fix. – mrdenny Jan 17 '12 at 21:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.