Firewall ports to open

We're setting up an IIS server in a DMZ but it needs to communicate with a
SQL server on the LAN through the NetScreen firewall. I've opened up all
ports in test and using Enterprise Manager & Query Analyser, the following
ports are used:
UDP 1434
TCP 9127
Now I've seen lots of mentions to 1434 (not sure it should be UDP but there
you go) but is TCP 9127 also needed?
Thanks, Rob.PS. Also noticed TCP 1433 as well so the list so far:
UDP: 1434
TCP: 9127, 1433
"Rob Nicholson" <informed@.community.nospam> wrote in message
news:egK0lfc6EHA.2876@.TK2MSFTNGP12.phx.gbl...
> We're setting up an IIS server in a DMZ but it needs to communicate with a
> SQL server on the LAN through the NetScreen firewall. I've opened up all
> ports in test and using Enterprise Manager & Query Analyser, the following
> ports are used:
> UDP 1434
> TCP 9127
> Now I've seen lots of mentions to 1434 (not sure it should be UDP but
there
> you go) but is TCP 9127 also needed?
> Thanks, Rob.
>|||Hi
Check out
http://support.microsoft.com/defaul...kb;en-us;287932
John
"Rob Nicholson" <informed@.community.nospam> wrote in message
news:OEYY2gc6EHA.1564@.TK2MSFTNGP09.phx.gbl...
> PS. Also noticed TCP 1433 as well so the list so far:
> UDP: 1434
> TCP: 9127, 1433
> "Rob Nicholson" <informed@.community.nospam> wrote in message
> news:egK0lfc6EHA.2876@.TK2MSFTNGP12.phx.gbl...
> there
>|||Hello Rob,
To communicate with a SQL server through the NetScreen firewall, you need
configure the firewall, you must allow traffic from *ANY* to 1433, and from
1433 to *ANY*, where *ANY* is a port greater than 1024.
*ANY* -> 1433
1433 -> *ANY*
The firewall software should allow this dynamic allocation to occur through
the use of rules. If it does, you can configure 1433 -> *ANY* established;
this will dynamically open the response port after a syn followed by a
syn/ack by way of a statefull packet inspection.
There is no way to limit the number of source TCP ports used for a SQL
Server client to connect; this would defeat the purpose of having the
client allocate a new, unused dynamic port. This is a TCP/IP standard that
is defined for Winsock applications; this is not a limitation of SQL Server
client communication.
If you want you can use firewall to allow connection to SQL server only
from IIS server. You need enable TCPIP protocol on both server and client
side.
In addition, a named instance of SQL Server 2000 will use a dynamic
destination port by default. This port should be changed to a fixed port
prior to configuring the firewall. The SQL Server Network Utility should be
used to configure the destination port. See SQL Server Books Online for
information on how to use the SQL Server Network Utility.
You can refer to the following article regarding how to find the SQL Server
instance port number:
INF: How to Connect to an SQL Server 2000 Named Instance with the Previous
Version's Client Tools (265808)
http://support.microsoft.com/defaul...KB;EN-US;265808
Otherwise, the client computer would need to open a random UDP port and the
server UDP port 1434 will be used to send the instance name, and if the
instance is clustered, the version of the SQL instance, the TCP port number
that the instance is listening on, and the named pipe that the instance is
using. However, if the goal is to minimize the number of ports open on the
firewall, a static port number should be chosen for the default instance
and any named instance. The client computers would need to be configured to
connect to a particular ServerName or ServerName instance and specific port
number.
When SQLMail is started on a SQL Server, a DLL responsible for this creates
a socket and listens for connections. SQL Enterprise Manager will
periodically connect to this socket and read a DWORD (32bit) value returned
from the server. This value determines the state of sqlmail. By default the
port which sqlmail use is 9127.
I hope above information is helpful.
Sophie Guo
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
========================================
=============
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.|||Hello Rob,
To communicate with a SQL server through the NetScreen firewall, you need
configure the firewall, you must allow traffic from *ANY* to 1433, and from
1433 to *ANY*, where *ANY* is a port greater than 1024.
*ANY* -> 1433
1433 -> *ANY*
The firewall software should allow this dynamic allocation to occur through
the use of rules. If it does, you can configure 1433 -> *ANY* established;
this will dynamically open the response port after a syn followed by a
syn/ack by way of a statefull packet inspection.
There is no way to limit the number of source TCP ports used for a SQL
Server client to connect; this would defeat the purpose of having the
client allocate a new, unused dynamic port. This is a TCP/IP standard that
is defined for Winsock applications; this is not a limitation of SQL Server
client communication.
If you want you can use firewall to allow connection to SQL server only
from IIS server. You need enable TCPIP protocol on both server and client
side.
In addition, a named instance of SQL Server 2000 will use a dynamic
destination port by default. This port should be changed to a fixed port
prior to configuring the firewall. The SQL Server Network Utility should be
used to configure the destination port. See SQL Server Books Online for
information on how to use the SQL Server Network Utility.
You can refer to the following article regarding how to find the SQL Server
instance port number:
INF: How to Connect to an SQL Server 2000 Named Instance with the Previous
Version's Client Tools (265808)
http://support.microsoft.com/defaul...KB;EN-US;265808
Otherwise, the client computer would need to open a random UDP port and the
server UDP port 1434 will be used to send the instance name, and if the
instance is clustered, the version of the SQL instance, the TCP port number
that the instance is listening on, and the named pipe that the instance is
using. However, if the goal is to minimize the number of ports open on the
firewall, a static port number should be chosen for the default instance
and any named instance. The client computers would need to be configured to
connect to a particular ServerName or ServerName instance and specific port
number.
When SQLMail is started on a SQL Server, a DLL responsible for this creates
a socket and listens for connections. SQL Enterprise Manager will
periodically connect to this socket and read a DWORD (32bit) value returned
from the server. This value determines the state of sqlmail. By default the
port which sqlmail use is 9127.
I hope above information is helpful.
Sophie Guo
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
========================================
=============
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.

firewall ports open for tcp/ip connection on server

I would like to know what ports need to be open to access MS SQL via
TCP/IP, using W2k3 and SQL2005.
The default port is 1433. Any UDP openings. I want to use SqlManager on a
remote machine also.
Thanks
Harry
Hi Harry
http://support.microsoft.com/kb/287932 describes how to configure the
firewall.
John
"Harry" wrote:

> I would like to know what ports need to be open to access MS SQL via
> TCP/IP, using W2k3 and SQL2005.
> The default port is 1433. Any UDP openings. I want to use SqlManager on a
> remote machine also.
> Thanks
> Harry
>
>

firewall ports open for tcp/ip connection on server

I would like to know what ports need to be open to access MS SQL via
TCP/IP, using W2k3 and SQL2005.
The default port is 1433. Any UDP openings. I want to use SqlManager on a
remote machine also.
Thanks
HarryHi Harry
http://support.microsoft.com/kb/287932 describes how to configure the
firewall.
John
"Harry" wrote:

> I would like to know what ports need to be open to access MS SQL via
> TCP/IP, using W2k3 and SQL2005.
> The default port is 1433. Any UDP openings. I want to use SqlManager on a
> remote machine also.
> Thanks
> Harry
>
>

firewall ports open for tcp/ip connection on server

I would like to know what ports need to be open to access MS SQL via
TCP/IP, using W2k3 and SQL2005.
The default port is 1433. Any UDP openings. I want to use SqlManager on a
remote machine also.
Thanks
HarryHi Harry
http://support.microsoft.com/kb/287932 describes how to configure the
firewall.
John
"Harry" wrote:
> I would like to know what ports need to be open to access MS SQL via
> TCP/IP, using W2k3 and SQL2005.
> The default port is 1433. Any UDP openings. I want to use SqlManager on a
> remote machine also.
> Thanks
> Harry
>
>

Firewall Ports

What ports need to be opened between the report server and the SQL Server backend DB? Does port 135 need to be opened?Port 135 is the DCOM port. I don't think it needs to be opened, although I am not 100% sure. Are you seeing problems?

Firewall and Ports

Hello
I would like to know which ports need to be open to enable SQL server 2000
connectivity by default.
ThanksHi
If using SQL Server authentication, 1433 (If you server is listening on it's
default port).
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Alekhine" <Alekhine@.discussions.microsoft.com> wrote in message
news:7D5AE212-2225-4837-A528-C38F8099456F@.microsoft.com...
> Hello
> I would like to know which ports need to be open to enable SQL server 2000
> connectivity by default.
> Thanks|||287932 INF: TCP Ports Needed for Communication to SQL Server Through a
Firewall
http://support.microsoft.com/?id=287932
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.

firewall

Hello,
I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
the sqlserver. Disabling the firewall solves the problem.
What else should I set?
Thanks
FrankIs it a named instance or a default instance?
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Frank" <frank@.iDontWantSpam.com> wrote in message news:42b92757$0$34674$e4fe514c@.news.xs4al
l.nl...
> Hello,
> I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
> the sqlserver. Disabling the firewall solves the problem.
> What else should I set?
> Thanks
> Frank
>|||http://support.microsoft.com/defaul...kb;en-us;287932
Hope this helps.
Francesco Anti
"Frank" <frank@.iDontWantSpam.com> ha scritto nel messaggio
news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
> Hello,
> I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
> the sqlserver. Disabling the firewall solves the problem.
> What else should I set?
> Thanks
> Frank
>|||Thanks, I get it.
Frank
"Francesco Anti" <fanti_@._sicosbt.it> schreef in bericht
news:OMDq4lwdFHA.3048@.TK2MSFTNGP12.phx.gbl...
> http://support.microsoft.com/defaul...kb;en-us;287932
> Hope this helps.
> Francesco Anti
>
> "Frank" <frank@.iDontWantSpam.com> ha scritto nel messaggio
> news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
>

firewall

Hello,
I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
the sqlserver. Disabling the firewall solves the problem.
What else should I set?
Thanks
Frank
Is it a named instance or a default instance?
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Frank" <frank@.iDontWantSpam.com> wrote in message news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
> Hello,
> I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
> the sqlserver. Disabling the firewall solves the problem.
> What else should I set?
> Thanks
> Frank
>
|||http://support.microsoft.com/default...b;en-us;287932
Hope this helps.
Francesco Anti
"Frank" <frank@.iDontWantSpam.com> ha scritto nel messaggio
news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
> Hello,
> I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
> the sqlserver. Disabling the firewall solves the problem.
> What else should I set?
> Thanks
> Frank
>
|||Thanks, I get it.
Frank
"Francesco Anti" <fanti_@._sicosbt.it> schreef in bericht
news:OMDq4lwdFHA.3048@.TK2MSFTNGP12.phx.gbl...
> http://support.microsoft.com/default...b;en-us;287932
> Hope this helps.
> Francesco Anti
>
> "Frank" <frank@.iDontWantSpam.com> ha scritto nel messaggio
> news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
>

firewall

Hello,
I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
the sqlserver. Disabling the firewall solves the problem.
What else should I set?
Thanks
FrankIs it a named instance or a default instance?
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Frank" <frank@.iDontWantSpam.com> wrote in message news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
> Hello,
> I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
> the sqlserver. Disabling the firewall solves the problem.
> What else should I set?
> Thanks
> Frank
>|||http://support.microsoft.com/default.aspx?scid=kb;en-us;287932
Hope this helps.
Francesco Anti
"Frank" <frank@.iDontWantSpam.com> ha scritto nel messaggio
news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
> Hello,
> I opened ports 1433 and 1434 in the Windows firewall and cannot connect to
> the sqlserver. Disabling the firewall solves the problem.
> What else should I set?
> Thanks
> Frank
>|||Thanks, I get it.
Frank
"Francesco Anti" <fanti_@._sicosbt.it> schreef in bericht
news:OMDq4lwdFHA.3048@.TK2MSFTNGP12.phx.gbl...
> http://support.microsoft.com/default.aspx?scid=kb;en-us;287932
> Hope this helps.
> Francesco Anti
>
> "Frank" <frank@.iDontWantSpam.com> ha scritto nel messaggio
> news:42b92757$0$34674$e4fe514c@.news.xs4all.nl...
>> Hello,
>> I opened ports 1433 and 1434 in the Windows firewall and cannot connect
>> to
>> the sqlserver. Disabling the firewall solves the problem.
>> What else should I set?
>> Thanks
>> Frank
>>
>