Microsoft XP SP2 blocks SQL Server 1

[SQLBill]

Microsoft has issued XP Service Pack 2. It is affecting 50 known products and one of them is SQL Server.

The issue is that the service pack turns on the built-in firewall. This firewall is capable of blocking incoming and/or outgoing traffic by ports.

Can you guess what two of the blocked ports are? Did you guess 1433 and 1434? Yep. Microsoft blocks the default ports used for their own product.

Check the following link (MS Knowledgebase Article) for more information.

http://support.microsoft.com/default.aspx?kbid=842242

-SQLBill

 

[SQLBill]

Okay.....it's not a question, but I clicked on the Helpful Tip before posting and it used the question mark instead.

-SQLBill

 

[mrdenny]

That's just beautiful. Although I supose Microsoft taking a hard stand about security is a good think though.

Denny

--Anything is possible. All it takes is a little research. (Me)

 

[SQLBill]

I don't know what basis they used to block all the ports they do, but I'm guessing that they are blocking 1433 and 1434 because of things like Slammer. Maybe the other products/ports being blocked are also ones likely/known to be hit by virus'/worms.

-SQLBill

 

[ecobb]

Most likely, instead of blocking individual ports, they blocked ALL ports except for the ones necessary for basic pc operations (web, email, ect...). So, instead of closing what you don't want, you now have to open what you do want. I guess that since the majority of users probably don't need those ports, it's now up to us to set up a pc to allow them...



Hope This Helps!

Ecobb

"My work is a game, a very serious game." - M.C. Escher

 

[mrdenny]

Ecobb is probally correct. From what I know of secure filre walls you start with a deny-all, then start opening ports (microsoft has always done this the other way). I remember reading somewhere, that to help network admins roll out SP2, you can download the whole thing, and configure what it locks down, then push that out via SUS and your life "should" be easier.

Denny

--Anything is possible. All it takes is a little research. (Me)