|
|
MSSQL
Started by rikmar67 at 07-24-2008 8:13 AM. Topic has 3 replies.
 
 
|
|
Sort Posts:
|
|
|
|
07-24-2008, 8:13 AM
|
rikmar67
Joined on 07-24-2008
Posts 1
|
Secure connection to my own SQL Server
|
|
|
|
|
We are just starting off with WebHost4Life. We have our own in house SQL Server and will not be using the server provided by WebHost4Life. But we need our website to communicate with the server. How can I ensure a secure transmission between the web server and our SQL Server? This will be done through standard ASP pages.
Note: The data that is transmitted itself doesn't necessarily need to be secure. It isn't sensitive data. I just want to make sure that someone can't intercept my connection string with the SQL login and password and then hack my server.
|
|
|
|
|
Report
|
|
|
|
07-28-2008, 5:43 PM
|
admin
Joined on 08-10-2005
Posts 245
|
Re: Secure connection to my own SQL Server
|
|
|
|
|
The best way is to put a firewall infront of your sql server. Choose a different port other than 1433 for your sql server. In your firewall, make sure only your website's IP address can acess to that SQL server IP/Port.
|
|
|
|
|
Report
|
|
|
|
07-30-2008, 5:37 AM
|
aanodide
Joined on 07-23-2008
Posts 4
|
Re: Secure connection to my own SQL Server
|
|
|
|
|
So even though the password will go over the wire, it would take IP spoofing or something to subvert the firewall and make use of it.
That sounds like a good thing. I didn't know there was firewall functionality. I guess I have to revisit all the menus.
|
|
|
|
|
Report
|
|
|
|
08-18-2008, 1:20 PM
|
trebor1952
Joined on 05-15-2006
Posts 6
|
Re: Secure connection to my own SQL Server
|
|
|
|
|
You can build an aspnet application that would hash the password/connection string and unhash it when it arrives on your local server. This is a little tricky, but it will prevent the sensitive data from getting hacked, if the ip spoofing attack works. Utilize the SSL feature of WBH4L would also be another approach.
|
|
|
|
|
Report
|
|
|
|
|
Webhost4life Fo... » Database Relate... » MSSQL » Secure connection to my own SQL Server
|
|
|
|