how to reduce DOS attacks

Hello to everyone

I am running MS SQL 2005 Express I get per day 2-4 hackers attacks trying to login from “sa”

Some 37 calls times per second one of attack was continuing 4 days

Is there some setting into MS SQL 2005 to reduce that?

Can you recommend me good firewall for DDOS attacks?

Is it there some legal action that I can take to this people I have their IPs most are from US and Canada?

Thank you in advance

val

Hi Val,

If you are seeing a lot of attacks, the best thing to do would be to move your db server to a different machine behind your firewall entirely. You can restrict external access to your database by using another web or application server to handle any requests.

You can also consider disabling your sa account just to be safe.

I'm not sure what sort of legal actions you can take, perhaps consult with a lawyer? You may have some options available.

=== Edited by Sung MSFT @. 16 Aug 2006 3:01 AM UTC===
Also, you can have your firewall block all the IP addresses that you have identified as hostile. This should hopefully cut down on the number of attacks as well.

Sung|||

To make the connection attempts fail even earlier you could also rename the sa account.

Thanks
Laurentiu

|||

Hi

when I setup first time the server I disable the "sa" account , and I am behind Windows firewall

I am looking something like if there is too many call just server to drop this IP

I have 8-10 MB log file just from fail to access to MS SQL server

I hope there will be way to be droped before that

10x

val

|||

There is no such feature currently in SQL Server, but we have received this suggestion before: http://connect.microsoft.com/SQLServer/feedback/ViewFeedback.aspx?FeedbackID=124700. You can add your comments to this feedback report or just vote for its importance.

Thanks
Laurentiu

|||I normally recommend that you use a named instance instead of a default instance. Also, do a port redirection from your firewall. Do not use port 1433 or 1434 on your SQL Server. Let the firewall resolve it for the clients.