1. Go to This site
Find your router model Example: ( D-LINK DSL-2740B )Code:http://www.portforward.com/english/routers/port_forwarding/routerindex.htm
Unblock this port for Windows:
1433 - SQL SERVER CONNECTION
Unblock these ports for Linux:
22 - SSH
80 - PSS
38170 - GlobalMgrSvr
38180 - GlobalAgentSvr
38181 - DBAgent
38121 - NETLIB / CHATNODE
38101 - NETLIB LOGIN SVR
38111 - NETLIB WORLD SERVER
38190 - CashDbAgent
Please make it sticky ;)
Thanks ;) :2gunsfiring_v1::smilie_xp
Very nice but you dont need to open port 1433. its only makes your system unsecurity and sql port is open for everything. just open the 381** in centos and that's all. because the SQL connection moves in the server, you dont go directly to use 1433! the server is using it for you. its unsecurity and un needed to open it!
And thanks for alerting all the ports and what they do ;)
The only ports you need to open are 38101 and 38121. However, if you want to be able to access the SQL database from home, you will need to open port 1433 aswell.
i done it like i done on my router because my router needs to have this port unblocked otherways the sever wont connect to sql.
If you are going to open 1433 i strongly suggest you do some googling on the types of sql injection attacks that are going on at the moment as sql attacks are very very common at the moment. Try to learn a little about what the hackers are trying to do and how to best protect yourself and your database.
i agree to thatOriginally Posted by chumpywumpy
"OR" "=" "OR" :) do you think im stupid? you can do sql inj via php script ;) if the script is secured enough no one will hack it..
bug in script and you got access to every thing by inserting EvilShell ;)
ok.. at first i didnt believe chumpy.. but now i do.. sorry for doubting chumpy.. but i cant connect when i put my server online using my WaN IP (119.***.***.***) so uHhh... is there a way ?? or none?
My Router Model : D-Link: DI-524
EDIT: IS this how its Done?
when i Probe its Closed... >.< Help?
Last edited by chiosin2; 03-09-08 at 05:02 PM.
chiosin2 like you see the port 80 is ready added delete the one you made and edit the one that is on the top.. remember to enable it while editing.
+ TurnOff any firewall including windows firewall..
Control Panel > Windows FireWall
@ellemen - I'm not trying to say anything like that so i apologise if that is how it came across. SQL injection can be done in other ways and not just via a website or php script. At the moment many large websites are under constant attack and not all of the attacks are aimed at the website or the webserver, some are aimed at MSSQL itself and use a variety of techniques to inject data into the database to try and get nasty things to appear on pages to infect people with things. 1433 is a known vunerable port and hackers are using some clever tricks to search the web for addresses with port 1443 open, some of these are even automated scripts which detect and attack automatically.
Have a google on the subject as you will find an awful lot of people fighting the problem at the moment. I work for a software company that deals with a lot of other large organisations and i am currently hearing about a lot of damage being done to a lot of our customers sites and MSSQL services, our own website has been under constant attack for nearly 3 months now (the website is one of the things i am involved with) and has been completely destroyed several times.
This is why i tell you to be careful, bugs in the way external access to the MSSQL services is handled is one of the main causes and MS have not fixed it yet.
Port 80 is not needed by the server at all as that is the HTTP port and only webservers use it. PSS is not used by us so you don't need to open a port for that, in fact the port 80 it shows in the PSS config is the port of the remote PSS site it tries connecting to and not an incoming port.
you should not open the port of the MSSQL to prevent hackers to ruin your database close port 1433
im using a DI-524 Router, and i was Wondering if i should let my DMZ (Demilitarized Zone) , let my CentOS ip be exposed to the internet... is it safe?
and i still don't have any clues how to forward ports.. =D....
except router install Firewall on your Windows server , and allow the IP of the Linux for MSSQL.
so your saying that i should place 127.0.0.1 << as my Windows ip.. then use the no-ip address with my CentOS? is that right?
yes, and use internal.txt with ur no-ip.
there is also easier way, you can port Forward with a program called SMNAPT 2.0 , you need to forward only the TCP ports. i use it for my PC's connected via crossover cable [internet<>PC1(acting as router)<>pc2]
i downloaded it but i dont understand how to use it.... @____@
i enable dmz that should cover all my need ports but problem im having is i can ping the centos server from comp and ping my comp from centos get responce but it still can't seem to connect to database even tho i have followed everything thru with chumpy guide and files , not to mention ihave windows vista 32 bit.
are you familiar with NAT
Okay guyz.. I am able to Port Forward, but I have a prob..
1st. Is it good or bad to open the SQl port?
2nd. I use PF Config to Port forward. Is it TCP Ports, or UDP Ports I have to open?
3rd. What do I have to do when Im done? Im through SQL DB Setup, and I have VMWare installed. And I think Im gonna use Dordort's easy CentOs setup where files are installed. But I dont know exacly what to do.. I dont really understand what he mean..
can you give me how to open ports ...i no understand.....
need to open ports at modem or at windows Firewall add port....
at modem i already open ports DMZ
pls give me clue......
Without knowing the exact make and model of your router we can't give you much help as the method is likely to be different on yours to other people's routers. DMZ is not a good choice so switch that off and then forward just the individual ports you need to the centos IP. Windows firewall won't affect this so you can ignore that.
See if you can find a guide for your specific router below as there are lots of guides done for specific hardware.
http://portforward.com/guides.htm
do you need to forward modem? lol sorry if i sound stupied no one really told me
I using Modem+router Brand Linksys....can help me how to setting this modem for open port...
i already open DMZ.....
can explent me more.....and what port must open
I should have watched my mouth and not said/talked shit to DeadlyData telling him things like your are not welcome here because then I become the one who is truly not welcome here.
I have a ZyXEL Router. Actually, my problem is, that I cant enter the config page, BECAUSE, I dont have the ID and Pass for the site, I get to the config page from. Then someone might say:"Just write your Default Gateway in ur adress bar" Well thats not what I mean! I have to login at cybercity.dk, because, they are the provider of my internet, and no matter what router I have, I have to login there. And I dont have the Id and Pass, because my dad wont give it to me..
Reply With Quote