Re: Microsoft SQL

[Matt <matt () telesales zip com au>]

Josef Pojsl wrote this...

> Dear firewall gurus,

> does anyone know the details of Microsoft SQL network protocol and
> its consequences WRT security? What security issues could arise if
> MS SQL was allowed through a firewall?  Is it possible at all with a
> proxy based FWTK-like firewall?

MS SQL network connections are made using a protocol called TDS
(tabulated data streams) as far as i can tell (ie from what i have
read).

> I have been trying to find more information on MS web pages but they
> don't seem to provide technical details.  I know, it's
> Microsoft...<sigh>

im not suprised i had the same problem. there is a bunch of people it
would seem who do have at least some understanding of such black arts
:) they are writing a free (LGPL) version of a TDS library which
could probably be used to proxy MS SQL and Sybase connections through
a firewall. at the very least it will provide you with a reference
platform to check against. im sure they can point you in the direction
of specs, white papers etc on the protocol itself. their web page is
at http://sunsite.unc.edu/freetds/

> TIA for any comments,

no problem :)

   Matt