Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We already use Hamachi to link our isolated servers together, but it is possible to restrict access to certain applications so that they can only be seen on the server or via Hamachi's VPN.

From our logs we can see "far eastern" probing of our SQL Server installations, and ideally we would like to restrict access to SQL Server boxes. We have a unsophisticated network topology of leased servers.

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

If this is running on a recent Windows Server version (preferably 2008 R2), then just use the windows firewall to deny access to your SQL ports except from the hamachi VPN IP addresses you need.

share|improve this answer
    
Thanks - yes I have come to the same conclusion –  Eric Hewett Jan 17 '12 at 12:54
add comment

This is why SQL Server's should never be exposed to the public Internet. Instead the SQL Server should be configured with private IPs which are not NAT'ed to a public IP.

Configure your routers or firewall and configure them to now allow any access from the outside world.

share|improve this answer
    
Thanks - It is an inherited system - which we are trying to modernise –  Eric Hewett Jan 17 '12 at 12:56
    
Sounds like there is probably a decent amount of stuff to fix. –  mrdenny Jan 17 '12 at 21:17
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.