MS SQL and Security

[Allen]

Hello, I have had a client express concern re their MS SQL dB. We would like to know if access to the MS SQL dB can be limited to an IP address.

Can this be done?

Thanks,

Allen

[newmem]

that's a good question....any ideas how to prevent someone hacking into your MS SQL DB and downloading all your important data?

[Brangwyn]

SQL Logons can't be restircted to a specific IP address in a shared environment that I know of.

Your only protection is a strong password, make it as long and complicted as possible.

[newmem]

but what if a hacker really wants to get into it? any other precaution that we can take from our side?

[Brangwyn]

Not really. Make complicated passwords and protect them, don't give them to anyone at all.

Unfortunately almost all system intrusions come from people using guessable passwords or doing silly things like writing them down or giving them to other people.