473,748 Members | 8,760 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Block Port 1433 on windows 2000 server

Ann
Hi

I have a question regarding the SQL Server(SQL Server 7) port 1433.
Some body is trying to hack into our Windows 2000 server through port
1433. Is there a way i can close this port? I tried using a tool
called Ipsecpol.exe ( Internet Protocol Security Policies Tool). But
when we run netstat, it still looks like they are able to connect to
the server using port 1433. Has anyone come across this problem? I
would appreciate it very much if somebody could send in any
suggestions regarding this.

Thanks,
Ann
Jul 20 '05 #1
6 9964
The issue isn't really "closing ports" - it's blocking access to them.
Are you using ISA? If not, you need a firewall. I'd pick up a cheap and
cheerful firewall appliance - I like the NetGear FR114P.

Ann wrote:
Hi

I have a question regarding the SQL Server(SQL Server 7) port 1433.
Some body is trying to hack into our Windows 2000 server through port
1433. Is there a way i can close this port? I tried using a tool
called Ipsecpol.exe ( Internet Protocol Security Policies Tool). But
when we run netstat, it still looks like they are able to connect to
the server using port 1433. Has anyone come across this problem? I
would appreciate it very much if somebody could send in any
suggestions regarding this.

Thanks,
Ann

Jul 20 '05 #2
On 12 Jul 2004 14:56:40 -0700, ns****@yahoo.co m (Ann) wrote:
I have a question regarding the SQL Server(SQL Server 7) port 1433.
Some body is trying to hack into our Windows 2000 server through port
1433. Is there a way i can close this port?


Don't open it in your firewall. Or any other port you don't want
accessed.

Jeff
Jul 20 '05 #3
Hi

This sounds like your SQL Server is not behind the firewall or as the others
have suggested the firewall is not configured correctly.

How do you know someone is trying to access the SQL Server? If this is being
reported from the firewall then it may be because it is dropping it!!

If you are not using windows only authentication, then make sure that you
have a strong sa password.You could run the Microsoft Baseline Security
Analyzer http://www.microsoft.com/technet/sec.../mbsahome.mspx to
make sure it is configured sensibly. I would also look at running IIS
lockdown on any webserver
http://www.microsoft.com/security/gu...dtech/IIS.mspx

Check out the advice on:
http://www.microsoft.com/sql/techinf...ty/default.asp
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=24

John

"Ann" <ns****@yahoo.c om> wrote in message
news:cc******** *************** ***@posting.goo gle.com...
Hi

I have a question regarding the SQL Server(SQL Server 7) port 1433.
Some body is trying to hack into our Windows 2000 server through port
1433. Is there a way i can close this port? I tried using a tool
called Ipsecpol.exe ( Internet Protocol Security Policies Tool). But
when we run netstat, it still looks like they are able to connect to
the server using port 1433. Has anyone come across this problem? I
would appreciate it very much if somebody could send in any
suggestions regarding this.

Thanks,
Ann

Jul 20 '05 #4
dev
Hi Ann.

The easy one is to buy a firewall box from your local computer store
or If you are using a windows server 2003 use the firewall insite
windows server 2003 (ICF). Click on the link to see how to enable it.
http://www.microsoft.com/resources/d...e_firewall.asp

After you either buy a firewall box or enabled ICF on your server then
try this link:
- www.grc.com
- Click ShieldsUp
- Roll down to HOT SPOT and click again shieldsUp
- click proceed
- write 1433 in the text field and click "User Specified Custom Port
Probe"
- See if its stealth.
- You can then click common ports to see if the common ports are
stealth or click all service ports to see if other ports are
open...(The best is if every one are green and not red)

Hope you understand this and solve this problem..

Danni, MCP
I have a question regarding the SQL Server(SQL Server 7) port 1433.
Some body is trying to hack into our Windows 2000 server through port
1433. Is there a way i can close this port?

Jul 20 '05 #5
dev
Sorry. i forgot it was a windows 2000 server. There is not a ICF.
You could also get a software firewall like ZoneAlarm??? If the server
is in a big firm it mabye better with a firewall box.

Danni
Jul 20 '05 #6
On 13 Jul 2004 01:22:45 -0700, de*@euro-consult.dk wrote:
Sorry. i forgot it was a windows 2000 server. There is not a ICF.
You could also get a software firewall like ZoneAlarm???
For home machines, that is fine, as would be the Sygate product. For
anything used 'in anger' this is a risky solution.
If the server is in a big firm it mabye better with a firewall box.


In any situation where the data and system availability/integrity is
valuable, a hardware firewall solution is the only way to go.
Jul 20 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
22322
by: nik | last post by:
Hi all I'm struggling to find an answer to this one! We've configured our SQL boxes to run under a different port number, e.g. from 1433 to 4533. This works fine under our Citrix enviornmnet where the dsn is configured to use the new port. The problem comes in terms of SQL Server management. For example, when you try and configure SQL Replication, it is not possible to add the subscriber unless the SQL Servce runs under port 1433,...
2
4736
by: Joseph | last post by:
for some reason i dont get any errors, but i believe that my server is not running on port 1433. the tcpip protocol is selected in the network configuration utility as well as name piper. the port selected is 1433. but when i telnet to 1433 i get the same errors as i would if i telnet to a non existant port. i also tried nbstat with no luck. what else can i do? thanks
1
17096
by: Akif | last post by:
Hi. I'm a SQL Server novice, so apologies if any of this sounds simple. I am running Windows XP SP2, and have just installed SQLServer 2000. I need another application to connect to SQLServer, and am specifying it to do so via localhost:1433, but keep getting an error whenever I try doing so saying it cannot connect to the database. A colleague of mine has the exact same set up on his machine, and he can connect to SQL Server fine....
1
2925
by: Byrocat | last post by:
I'm doing some vulnerability assessments of MS SQLServer installations using AppDetective. On doing the "discovery" proble (to find the instances), I find that I get two "hits" -- port 1433 shows the MS SQALServer instance, but port 1434 comes up with MS SQL Server Redirector. The online books seems to be a bit light on waht the use of this port is for.
2
1819
by: Mark Lauser | last post by:
Hello, I'm running a vb.net Windows application that communicates with a SQL Server using SQLClient.SQLConnection. How do I specify the port on the client that should be used for this communication? I would like to have a setting in the application that will allow the user to change this as desired. I have a customer that would like the client application to use port 80 so
1
6607
by: Mario | last post by:
Witam! Mam problem z polaczeniem sie z baza danych po TCP/IP przez port domyslny 1433, nie mozna sie telnetowac ani nic z nim zrobic, poprostu niezyje. Port jest zamkniety i nijak nie moge go zmusic do jakiejkolwiek komunikacji nawet po localhoscie. Skaner portów wykrywa go jako zamkniety. Czy wiecie moze jak ten port otworzyc i zmusic go do komunikacji z baza danych? OS win2k3, MSSQL2000 Server. Pozdrawiam Hello!
1
18550
usafshah
by: usafshah | last post by:
i have installed sql server 2000 and set default port 1433. but i ca'nt access from outside ..i have given access to sql server machine from outside ip . but i guess something is wrong the port configuration, cause when i check it through netstat (with all parameters) but is not listening on port 1433.
0
1730
by: basuritta | last post by:
I am trying to add a SQL2000 subscriptor to a SQL2005 publisher and distributor using the Management Studio. I'm using a non-standard port in both ends, but I have set the port for the TCP/IP protocol to the non-standard port in both the server and client network configuration. I can add the SQL2000 server to the Management Studio console without problems, and even without haveing to specify the port I'm using (as expected)
0
3770
by: thesti | last post by:
hello, i'm trying to connect to SQL Server 2000 on my localhost through JDBC. i'm using the Microsoft SQL Server JDBC Driver 2.0 i couldnt make it, as i get the following error Unable to add connection. Cannot establish a connection to jdbc:sqlserver://localhost:1433;databaseName=Northwind using com.microsoft.sqlserver.jdbc.SQLServerDriver (The TCP/IP connection
0
9548
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9374
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
9325
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9249
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
6076
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4607
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4876
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
3315
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
3
2215
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.