all groups > sql server replication > february 2004 >
You're in the

sql server replication

group:

Anonymous Replication over the Internet


Anonymous Replication over the Internet Michael Tissington
2/13/2004 11:10:31 AM
sql server replication:
I hope I'm missing something here .... but it seems to me that if I set up
replication over the internet (with ftp) and allow anonymous subscriptions
then anyone who knows the publisher and database name can access the
database.

Is this correct ?

--
Michael Tissington
http://www.oaklodge.com
http://www.tabtag.com

Re: Anonymous Replication over the Internet Michael Tissington
2/13/2004 1:20:13 PM
Thanks

--
Michael Tissington
http://www.oaklodge.com
http://www.tabtag.com

[quoted text, click to view]

Re: Anonymous Replication over the Internet Hilary Cotter
2/13/2004 4:03:07 PM
yes this is true, but keep in mind that you can set up your ftp server so
that it will only respond to known IP's. Every other IP will be denied.

Most people who are replicating over the internet do not use the standard
FTP port, they pick another one. This doesn't buy you much as the average
port scanner will pick up the new ip.

[quoted text, click to view]

Re: Anonymous Replication over the Internet Hilary Cotter
2/13/2004 4:06:05 PM
one more point. Use NT authentication on your FTP server. Your account and
password will be sent plain text, but only a sniffer on the distributor,
publisher, or subscriber will be able to read these plain text accounts and
passwords.

If a hacker has compromised your system to the point that he/she has been
able to install a sniffer locally you have much bigger security problems to
worry about.

[quoted text, click to view]

AddThis Social Bookmark Button