Sunday, March 11, 2012

Blocking UDP Port 1434

In order to protect from 'slammer' kind of virus, we are
planning to block UDP Port 1434 on all gateways. Named
instances seem to rely on UDP Port 1434. Since TCP port
the sql instance is listening on can be re-assigned, Can
we reassign the UDP port 1434 as well? Any input will be
appreciated. Thank you!No. You can use client aliases to enable clients to resolve named instance
network endpoints
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Wayne" <anonymous@.discussions.microsoft.com> wrote in message
news:15ca401c41699$7b2a65c0$a301280a@.phx
.gbl...
> In order to protect from 'slammer' kind of virus, we are
> planning to block UDP Port 1434 on all gateways. Named
> instances seem to rely on UDP Port 1434. Since TCP port
> the sql instance is listening on can be re-assigned, Can
> we reassign the UDP port 1434 as well? Any input will be
> appreciated. Thank you!
>|||We are talking about thousands of clients and I am not
sure all applications support the use of aliases. Is there
an easy way out? Will the use of Proxy Server be a better
choice? Thanks for your input!

>--Original Message--
>No. You can use client aliases to enable clients to
resolve named instance
>network endpoints
>--
>HTH
>Jasper Smith (SQL Server MVP)
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>
>"Wayne" <anonymous@.discussions.microsoft.com> wrote in
message
> news:15ca401c41699$7b2a65c0$a301280a@.phx
.gbl...
>
>.
>|||Not sure if this is of use to you. But still... You can configure SQL Server
to Listen on multiple ports. Refer to the KB article :
http://support.microsoft.com/defaul...kb;en-us;294453 for further
information.
HTH,
Vinod Kumar
MCSE, DBA, MCAD, MCSD
http://www.extremeexperts.com
Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techin.../2000/books.asp
"Wayne" <anonymous@.discussions.microsoft.com> wrote in message
news:15eb901c416ab$59b613a0$a501280a@.phx
.gbl...
> We are talking about thousands of clients and I am not
> sure all applications support the use of aliases. Is there
> an easy way out? Will the use of Proxy Server be a better
> choice? Thanks for your input!
>
> resolve named instance
> message

No comments:

Post a Comment