External IIS tapping on Internal SQL

  • is it possible for my asp scripts hosted on a external IIS to establish a connection with the sql server sitting in my intranet?

    can i "open" a particular db to that external webserver?

  • You could open up the firewall between the two named servers over port 1433 (if you use tcp-ip as your netlib).

    If you are going to do this make sure you name both servers and the port, so you don't open a very big hole in your network security

    Otherwise you could network administrator could NAT the server so it appears on both your internal and external network.

    Before you do this I would look at the impact on security on your network

    Steven

  • Be sure if you open our firewall, you only allow connections from the IIS server. Here we have 2 NICs in the IIS server, one to the Internet and one to a network that can "see" the SQL Server. The SQL Server is never allowed on the Internet space and the IIS server does not IP forward.

    Steve Jones

    steve@dkranch.net

  • If you are going to do this, ensure the standard safeguards are taken eg. the sa password is not blank. As that sql virus last week exploted that default option.

    Steven

  • This Q article might be of some assistance as far as opening up the firewall only as much as needed:

    http://support.microsoft.com/support/kb/articles/Q287/9/32.ASP

    K. Brian Kelley

    bk@warpdrivedesign.org

    http://www.sqlservercentral.com/columnists/bkelley/

    K. Brian Kelley
    @kbriankelley

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply