July 30, 2010     |
Network Toaster
SQL Security Forums
Note: SQLSecurity.com does not allow nor require registration due to privacy concerns for users. SQLSecurity.com is open and anonymous for all. Please report any abuse or profanity.
Reply To Message:
Posted By n/a on 1/1/2001
Subject: osql -L and SQLPing
Message: For an overview of what is occuring take a look at this KB article:
http://support.microsoft.com/support/kb/articles/Q287/9/32.ASP?LN=EN-US&SD=gn&FR=0&qry=1434&rnk=5&src=DHCS_MSPSS_gn_SRCH&SPR=MSALL

For a quick high-level overview, it is possible for SQL Servers to discover one another via NetBIOS broadcasts as well as through a discovery mechanism utilizing UDP 1434.

It is assumed you will be blocking NetBIOS traffic at the firewall. It is also a good idea to block UDP 1434 at the firewall to make sure SQL Servers cannot be discovered by remote hosts. Hopefully you're doing all of this already.

Please ask if you have any more specific questions.

Chip

UserName: 
Subject:  Osql -L and UDP packet
Body:
  
Show Replies:


ActiveForums 3.6
Copyright 1999 by Chip Andrews   |  Privacy Statement  |  Terms Of Use