Networks

Ask something
Discussion Locked

Port restrictions

0 helpful
4 replies

by troubleman van

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Running SQL as a backend server for Web applications. I need to be able to maintain ports availability for Home Grown services at the high port number range ( i.e. 9000,9001). How can ports be restricted only to a particular organization?

4 replies

by zen37

Without knowing which device would be doing the restriction, your organization will need a source address to communicate. If you restrict those ports to the source address, only they will be able to communicate.

by techrepublic

If you're talking about an internal network vs a device in your DMZ, your should be able to limit the source IP. If you're talking about groups on your corporate lan, you'll need firewall functionality on your SQL server machine. You can then use that firewall to limit source IPs.

Not knowing this or even the platforms involved, it's difficult to provide more detail.

by hozcanhan

the particular organization would have a static ip . at the particular organization redirect the sql calls to the port ( i.e 9000,9001 etc ) . at the server end set up a firewall and check source ip and incoming port. if in the filtering list grant access . the question is do you trust every call posing itself ( NATting ) as the ip from the particular org ? may need to go down one further to mac address filtering ( by learning the mac address of the particular org's static ip network port )

This discussion is closed to new replies.