Posted by Erland Sommarskog on 06/21/05 01:09

pigeon (UseLinkToEmail@dbForumz.com) writes:
> What can I do after this? I guess i could block their ip via my cisco
> PIX firwall.. but is there anyway to automatically block a user that
> tries to login to 'sa'? From what I have read, SQL doesn't have a
> feature to block users based on their ip

Well, as far as SQL Server is concerned, that user is 'sa', so you
better make use of that firewall.

And be very glad that this was no serious attempt to brute-force
attack. In that case, the intruder would probably have cracked your
sa password by now.


--
Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techinfo/productdoc/2000/books.asp

• Next in forum: Re: deadlocks involving parallelism
• Prev in forum: Re: VB6/SQL Server application runs locally, but not from server
• Thread view: Re: Re: Re: How find user is sending a packet every .02 sec to M

[Reply to this message]