Binary Serialization

Hello,

I am trying to serialize (binary) a class and save it in a database. I followed a few examples I found in internet and this is what I came up with:

1' Rows2<Serializable()> _3Public Class Rows4Implements ISerializable56Private _RowsAs New Generic.List(Of Row)7Public Property Rows()As Generic.List(Of Row)8Get9 Return _Rows10End Get11 Set(ByVal valueAs Generic.List(Of Row))12 _Rows = value13End Set14 End Property' Rows1516 ' New17Public Sub New()18End Sub' New1920 ' New21Public Sub New(ByVal siRowsAs SerializationInfo,ByVal scRowsAs StreamingContext)22End Sub' New2324 ' GetObjectData25Public Sub GetObjectData(ByVal siRowsAs SerializationInfo,ByVal scRowsAs StreamingContext)Implements ISerializable.GetObjectData2627 siRows.AddValue("Rows",Me.Rows)2829End Sub' GetObjectData3031Public Sub Serialize(ByVal filenameAs String)3233Dim sRowsAs Stream = Stream.Null34Try35 sRows = File.Open(filename, FileMode.Create, FileAccess.ReadWrite)36Dim bfRowsAs New BinaryFormatter37 bfRows.Serialize(sRows,Me)38Finally39 sRows.Close()40End Try4142 End Sub' Serialize4344Public Shared Function Deserialize(ByVal filenameAs String)As Rows4546Dim sRowsAs Stream = Stream.Null47Try48 sRows = File.Open(filename, FileMode.Open, FileAccess.Read)49Dim bfRowsAs New BinaryFormatter50Return CType(bfRows.Deserialize(sRows), Rows)51Finally52 sRows.Close()53End Try5455 End Function' Deserialize5657End Class' Rows
 
After serializing the class I need to save it in an a SQL 2005 database.

But all the examples I followed use the filename ...

Anyway, do I need to do something to save this into an SQL 2005 database or can I use it as follows? And how can I use this?

This is the first time I do something like this so I am a little bit confused.

Thanks,

Miguel 

well all u have to do is add "srows" which is the binary serialize stream to ur table, of course u must have a field in atable that is of type image.

Just include a simple insert as ur inserting regular Data to ur table, and here's the code to get the byte array to insert into the image field

byte

[] data;

srows.Read(data,0,

int.MaxValue);

like this just add data to ur image field in ur tabel.

and to read it back again, do the opposite

srows.Write(data, 0, data.Length); //ull have ur binary wrote back to the stream which is SRows

Hope this helps

best way to tolerate an unreliable WAN connection?

I'm looking at a problem two sites have - the both run the same ERP system
on one server, and their WAN and internet connections are unreliable. What
is the preferred method to keep people from sitting on their thumbs when the
WAN is unavailable? What about if you want to be able to change data at both
locations while the connection is down?
Paul
I would cehck with the ERP vendor to see if they support
replication...either through SQL Server or through their own processes.
Many ERP/CRM vendors do have a "remote server" concept built-in for just
such a situation
Kevin Hill
President
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
www.experts-exchange.com - experts compete for points to answer your
questions
"Paul" <noone@.executespammers.org> wrote in message
news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> I'm looking at a problem two sites have - the both run the same ERP system
> on one server, and their WAN and internet connections are unreliable. What
> is the preferred method to keep people from sitting on their thumbs when
> the
> WAN is unavailable? What about if you want to be able to change data at
> both
> locations while the connection is down?
> Paul
>
|||I messed with replication while back. It made making changes to the database
(new columns, SP's etc) a pain. I was hoping there might be an alternative,
maybe a third-party product.
The ERP system is a custom one. I'm trying to find a solution for a problem
my friend is having. Definitely anything he settles on to fix it would be of
interest to me, because I do custom ERP systems as well. We're fortunate
enough here though where WAN downtime hasn't been an issue thus far.
Paul
"Kevin3NF" <KHill@.NopeIDontNeedNoSPAM3NF-inc.com> wrote in message
news:u6VabyujFHA.2852@.TK2MSFTNGP15.phx.gbl...[vbcol=seagreen]
> I would cehck with the ERP vendor to see if they support
> replication...either through SQL Server or through their own processes.
> Many ERP/CRM vendors do have a "remote server" concept built-in for just
> such a situation
> --
> Kevin Hill
> President
> 3NF Consulting
> www.3nf-inc.com/NewsGroups.htm
> www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
> www.experts-exchange.com - experts compete for points to answer your
> questions
>
> "Paul" <noone@.executespammers.org> wrote in message
> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
system[vbcol=seagreen]
What
>
|||If you want the system usable in two places that are not connected (during a
WAN outage), you are definitely looking into replication. Unless one of the
systems is going to be read-only. In that case you may be able to look into
log shipping, or 3rd party products like double-take from
www.nsisoftware.com (no affiliation)
Kevin Hill
President
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
www.experts-exchange.com - experts compete for points to answer your
questions
"Paul" <noone@.executespammers.org> wrote in message
news:%231ALn%23ujFHA.3348@.tk2msftngp13.phx.gbl...
>I messed with replication while back. It made making changes to the
>database
> (new columns, SP's etc) a pain. I was hoping there might be an
> alternative,
> maybe a third-party product.
> The ERP system is a custom one. I'm trying to find a solution for a
> problem
> my friend is having. Definitely anything he settles on to fix it would be
> of
> interest to me, because I do custom ERP systems as well. We're fortunate
> enough here though where WAN downtime hasn't been an issue thus far.
> Paul
> "Kevin3NF" <KHill@.NopeIDontNeedNoSPAM3NF-inc.com> wrote in message
> news:u6VabyujFHA.2852@.TK2MSFTNGP15.phx.gbl...
> system
> What
>
|||Hi
Why not get the network sorted out. If the WAN goes down, hit ISDN/Dial Up
and keep the location working.
Implementing workarounds because the network guys can't keep their act
together is a difficult and costly thing.
Regards
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Paul" <noone@.executespammers.org> wrote in message
news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> I'm looking at a problem two sites have - the both run the same ERP system
> on one server, and their WAN and internet connections are unreliable. What
> is the preferred method to keep people from sitting on their thumbs when
> the
> WAN is unavailable? What about if you want to be able to change data at
> both
> locations while the connection is down?
> Paul
>
|||Yeah, that's the advice I gave.
According to the guy suffering from this, one site is out in the sticks and
has only Verizon for a provider and (apparently) one option for
connectivity. I told him to try to set up a failover connection over a
regular cable broadband connection. Never seen it done, but I don't see why
it couldn't work. People may turn their noses up at residential connections
but it's better than nothing, and some of them are damn fast. I've been
looking at Verizon's FIOS and salivating. 30Mb/s!
Paul
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:u8tKsY3jFHA.3144@.TK2MSFTNGP12.phx.gbl...[vbcol=seagreen]
> Hi
> Why not get the network sorted out. If the WAN goes down, hit ISDN/Dial Up
> and keep the location working.
> Implementing workarounds because the network guys can't keep their act
> together is a difficult and costly thing.
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "Paul" <noone@.executespammers.org> wrote in message
> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
system[vbcol=seagreen]
What
>

best way to tolerate an unreliable WAN connection?

I'm looking at a problem two sites have - the both run the same ERP system
on one server, and their WAN and internet connections are unreliable. What
is the preferred method to keep people from sitting on their thumbs when the
WAN is unavailable? What about if you want to be able to change data at both
locations while the connection is down?
PaulI would cehck with the ERP vendor to see if they support
replication...either through SQL Server or through their own processes.
Many ERP/CRM vendors do have a "remote server" concept built-in for just
such a situation
Kevin Hill
President
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
www.experts-exchange.com - experts compete for points to answer your
questions
"Paul" <noone@.executespammers.org> wrote in message
news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> I'm looking at a problem two sites have - the both run the same ERP system
> on one server, and their WAN and internet connections are unreliable. What
> is the preferred method to keep people from sitting on their thumbs when
> the
> WAN is unavailable? What about if you want to be able to change data at
> both
> locations while the connection is down?
> Paul
>|||I messed with replication while back. It made making changes to the database
(new columns, SP's etc) a pain. I was hoping there might be an alternative,
maybe a third-party product.
The ERP system is a custom one. I'm trying to find a solution for a problem
my friend is having. Definitely anything he settles on to fix it would be of
interest to me, because I do custom ERP systems as well. We're fortunate
enough here though where WAN downtime hasn't been an issue thus far.
Paul
"Kevin3NF" <KHill@.NopeIDontNeedNoSPAM3NF-inc.com> wrote in message
news:u6VabyujFHA.2852@.TK2MSFTNGP15.phx.gbl...
> I would cehck with the ERP vendor to see if they support
> replication...either through SQL Server or through their own processes.
> Many ERP/CRM vendors do have a "remote server" concept built-in for just
> such a situation
> --
> Kevin Hill
> President
> 3NF Consulting
> www.3nf-inc.com/NewsGroups.htm
> www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
> www.experts-exchange.com - experts compete for points to answer your
> questions
>
> "Paul" <noone@.executespammers.org> wrote in message
> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
system[vbcol=seagreen]
What[vbcol=seagreen]
>|||If you want the system usable in two places that are not connected (during a
WAN outage), you are definitely looking into replication. Unless one of the
systems is going to be read-only. In that case you may be able to look into
log shipping, or 3rd party products like double-take from
www.nsisoftware.com (no affiliation)
Kevin Hill
President
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
www.experts-exchange.com - experts compete for points to answer your
questions
"Paul" <noone@.executespammers.org> wrote in message
news:%231ALn%23ujFHA.3348@.tk2msftngp13.phx.gbl...
>I messed with replication while back. It made making changes to the
>database
> (new columns, SP's etc) a pain. I was hoping there might be an
> alternative,
> maybe a third-party product.
> The ERP system is a custom one. I'm trying to find a solution for a
> problem
> my friend is having. Definitely anything he settles on to fix it would be
> of
> interest to me, because I do custom ERP systems as well. We're fortunate
> enough here though where WAN downtime hasn't been an issue thus far.
> Paul
> "Kevin3NF" <KHill@.NopeIDontNeedNoSPAM3NF-inc.com> wrote in message
> news:u6VabyujFHA.2852@.TK2MSFTNGP15.phx.gbl...
> system
> What
>|||Hi
Why not get the network sorted out. If the WAN goes down, hit ISDN/Dial Up
and keep the location working.
Implementing workarounds because the network guys can't keep their act
together is a difficult and costly thing.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Paul" <noone@.executespammers.org> wrote in message
news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> I'm looking at a problem two sites have - the both run the same ERP system
> on one server, and their WAN and internet connections are unreliable. What
> is the preferred method to keep people from sitting on their thumbs when
> the
> WAN is unavailable? What about if you want to be able to change data at
> both
> locations while the connection is down?
> Paul
>|||Yeah, that's the advice I gave.
According to the guy suffering from this, one site is out in the sticks and
has only Verizon for a provider and (apparently) one option for
connectivity. I told him to try to set up a failover connection over a
regular cable broadband connection. Never seen it done, but I don't see why
it couldn't work. People may turn their noses up at residential connections
but it's better than nothing, and some of them are damn fast. I've been
looking at Verizon's FIOS and salivating. 30Mb/s!
Paul
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:u8tKsY3jFHA.3144@.TK2MSFTNGP12.phx.gbl...
> Hi
> Why not get the network sorted out. If the WAN goes down, hit ISDN/Dial Up
> and keep the location working.
> Implementing workarounds because the network guys can't keep their act
> together is a difficult and costly thing.
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "Paul" <noone@.executespammers.org> wrote in message
> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
system[vbcol=seagreen]
What[vbcol=seagreen]
>

best way to tolerate an unreliable WAN connection?

I'm looking at a problem two sites have - the both run the same ERP system
on one server, and their WAN and internet connections are unreliable. What
is the preferred method to keep people from sitting on their thumbs when the
WAN is unavailable? What about if you want to be able to change data at both
locations while the connection is down?
PaulI would cehck with the ERP vendor to see if they support
replication...either through SQL Server or through their own processes.
Many ERP/CRM vendors do have a "remote server" concept built-in for just
such a situation
--
Kevin Hill
President
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
www.experts-exchange.com - experts compete for points to answer your
questions
"Paul" <noone@.executespammers.org> wrote in message
news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> I'm looking at a problem two sites have - the both run the same ERP system
> on one server, and their WAN and internet connections are unreliable. What
> is the preferred method to keep people from sitting on their thumbs when
> the
> WAN is unavailable? What about if you want to be able to change data at
> both
> locations while the connection is down?
> Paul
>|||I messed with replication while back. It made making changes to the database
(new columns, SP's etc) a pain. I was hoping there might be an alternative,
maybe a third-party product.
The ERP system is a custom one. I'm trying to find a solution for a problem
my friend is having. Definitely anything he settles on to fix it would be of
interest to me, because I do custom ERP systems as well. We're fortunate
enough here though where WAN downtime hasn't been an issue thus far.
Paul
"Kevin3NF" <KHill@.NopeIDontNeedNoSPAM3NF-inc.com> wrote in message
news:u6VabyujFHA.2852@.TK2MSFTNGP15.phx.gbl...
> I would cehck with the ERP vendor to see if they support
> replication...either through SQL Server or through their own processes.
> Many ERP/CRM vendors do have a "remote server" concept built-in for just
> such a situation
> --
> Kevin Hill
> President
> 3NF Consulting
> www.3nf-inc.com/NewsGroups.htm
> www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
> www.experts-exchange.com - experts compete for points to answer your
> questions
>
> "Paul" <noone@.executespammers.org> wrote in message
> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> > I'm looking at a problem two sites have - the both run the same ERP
system
> > on one server, and their WAN and internet connections are unreliable.
What
> > is the preferred method to keep people from sitting on their thumbs when
> > the
> > WAN is unavailable? What about if you want to be able to change data at
> > both
> > locations while the connection is down?
> >
> > Paul
> >
> >
>|||If you want the system usable in two places that are not connected (during a
WAN outage), you are definitely looking into replication. Unless one of the
systems is going to be read-only. In that case you may be able to look into
log shipping, or 3rd party products like double-take from
www.nsisoftware.com (no affiliation)
--
Kevin Hill
President
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
www.experts-exchange.com - experts compete for points to answer your
questions
"Paul" <noone@.executespammers.org> wrote in message
news:%231ALn%23ujFHA.3348@.tk2msftngp13.phx.gbl...
>I messed with replication while back. It made making changes to the
>database
> (new columns, SP's etc) a pain. I was hoping there might be an
> alternative,
> maybe a third-party product.
> The ERP system is a custom one. I'm trying to find a solution for a
> problem
> my friend is having. Definitely anything he settles on to fix it would be
> of
> interest to me, because I do custom ERP systems as well. We're fortunate
> enough here though where WAN downtime hasn't been an issue thus far.
> Paul
> "Kevin3NF" <KHill@.NopeIDontNeedNoSPAM3NF-inc.com> wrote in message
> news:u6VabyujFHA.2852@.TK2MSFTNGP15.phx.gbl...
>> I would cehck with the ERP vendor to see if they support
>> replication...either through SQL Server or through their own processes.
>> Many ERP/CRM vendors do have a "remote server" concept built-in for just
>> such a situation
>> --
>> Kevin Hill
>> President
>> 3NF Consulting
>> www.3nf-inc.com/NewsGroups.htm
>> www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
>> www.experts-exchange.com - experts compete for points to answer your
>> questions
>>
>> "Paul" <noone@.executespammers.org> wrote in message
>> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
>> > I'm looking at a problem two sites have - the both run the same ERP
> system
>> > on one server, and their WAN and internet connections are unreliable.
> What
>> > is the preferred method to keep people from sitting on their thumbs
>> > when
>> > the
>> > WAN is unavailable? What about if you want to be able to change data at
>> > both
>> > locations while the connection is down?
>> >
>> > Paul
>> >
>> >
>>
>|||Hi
Why not get the network sorted out. If the WAN goes down, hit ISDN/Dial Up
and keep the location working.
Implementing workarounds because the network guys can't keep their act
together is a difficult and costly thing.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Paul" <noone@.executespammers.org> wrote in message
news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> I'm looking at a problem two sites have - the both run the same ERP system
> on one server, and their WAN and internet connections are unreliable. What
> is the preferred method to keep people from sitting on their thumbs when
> the
> WAN is unavailable? What about if you want to be able to change data at
> both
> locations while the connection is down?
> Paul
>|||Yeah, that's the advice I gave.
According to the guy suffering from this, one site is out in the sticks and
has only Verizon for a provider and (apparently) one option for
connectivity. I told him to try to set up a failover connection over a
regular cable broadband connection. Never seen it done, but I don't see why
it couldn't work. People may turn their noses up at residential connections
but it's better than nothing, and some of them are damn fast. I've been
looking at Verizon's FIOS and salivating. 30Mb/s!
Paul
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:u8tKsY3jFHA.3144@.TK2MSFTNGP12.phx.gbl...
> Hi
> Why not get the network sorted out. If the WAN goes down, hit ISDN/Dial Up
> and keep the location working.
> Implementing workarounds because the network guys can't keep their act
> together is a difficult and costly thing.
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "Paul" <noone@.executespammers.org> wrote in message
> news:OhI52pujFHA.3288@.TK2MSFTNGP09.phx.gbl...
> > I'm looking at a problem two sites have - the both run the same ERP
system
> > on one server, and their WAN and internet connections are unreliable.
What
> > is the preferred method to keep people from sitting on their thumbs when
> > the
> > WAN is unavailable? What about if you want to be able to change data at
> > both
> > locations while the connection is down?
> >
> > Paul
> >
> >
>

Best way to secure an exposed SQL Server

Hi experts,
I have an application that my company designed and sold to users years ago
that requires SQL port 1433 to be open to the Internet. (Insert .. shame a
you here!).
There is basically a straight NAT statement from our firewall to the SQL
server that allows ALL inbound traffic to SQL. I am looking for the best
method to secure this connection from the application side (it is under
rewrite). Possibly encode the app to use some sort of VPN or maybe add a
front end server to autheticate the SQL users first, change the port and pass
to the back-end sql server?... I dont know really... can someone please
provide me with some design suggestions to take to my developers in order to
secure and encrypt there SQL sessions for their appications? I am able to
design hardware solutions to assist with this too!
I know its best practices to NOT have SQL open, but this late in the game,
it would take a miracle to get all our customers to change ports. Thanks for
your timely suggestions!!
"Scott" <Scott@.discussions.microsoft.com> schrieb im Newsbeitrag
news:CE23D173-4B46-4AB3-B139-4664E65B58B3@.microsoft.com...
> Hi experts,
> I have an application that my company designed and sold to users years ago
> that requires SQL port 1433 to be open to the Internet. (Insert .. shame a
> you here!).
There you are :-)

> There is basically a straight NAT statement from our firewall to the SQL
> server that allows ALL inbound traffic to SQL. I am looking for the best
> method to secure this connection from the application side (it is under
> rewrite). Possibly encode the app to use some sort of VPN or maybe add a
> front end server to autheticate the SQL users first, change the port and
> pass
> to the back-end sql server?... I dont know really... can someone
> please
> provide me with some design suggestions to take to my developers in order
> to
> secure and encrypt there SQL sessions for their appications? I am able to
> design hardware solutions to assist with this too!
I wouldnt code that on my own, I would suggest using a software VPN client
which establishs a conection to the internal network and use the SQLServer
the old fashioned way. Exposing the SQLerver is always risky because your
are exposing productional data to the internet and to possible hackers. Even
if you are coding of 99% solution, that would bring nightmares if I would be
responsible for that.
SO my suggestion would be to use a hardware solution on the one sideand a
software / Hardware solution on the other side implementing VPN (perhaps, if
you have money left to implement some securiyt with some kind of external
certification /smartcard solution)

> I know its best practices to NOT have SQL open, but this late in the game,
> it would take a miracle to get all our customers to change ports. Thanks
> for
> your timely suggestions!!
Just my two cents for that.
HTH, Jens Suessmeyer.
|||We use a hardware firewall to only let some specific IP to access the
SQLServer through the Internet, until now, it is fine.
"Jens Smeyer" <Jens@.Remove_this_For_Contacting.sqlserver2005.de> glsD:Olhu%23%230eFHA.1404@.TK2MSFTNGP09.p hx.gbl...
> "Scott" <Scott@.discussions.microsoft.com> schrieb im Newsbeitrag
> news:CE23D173-4B46-4AB3-B139-4664E65B58B3@.microsoft.com...
> There you are :-)
>
> I wouldnt code that on my own, I would suggest using a software VPN
> client which establishs a conection to the internal network and use the
> SQLServer the old fashioned way. Exposing the SQLerver is always risky
> because your are exposing productional data to the internet and to
> possible hackers. Even if you are coding of 99% solution, that would bring
> nightmares if I would be responsible for that.
> SO my suggestion would be to use a hardware solution on the one sideand a
> software / Hardware solution on the other side implementing VPN (perhaps,
> if you have money left to implement some securiyt with some kind of
> external certification /smartcard solution)
>
> Just my two cents for that.
> HTH, Jens Suessmeyer.
>

Best way to secure an exposed SQL Server

Hi experts,
I have an application that my company designed and sold to users years ago
that requires SQL port 1433 to be open to the Internet. (Insert .. shame a
you here!).
There is basically a straight NAT statement from our firewall to the SQL
server that allows ALL inbound traffic to SQL. I am looking for the best
method to secure this connection from the application side (it is under
rewrite). Possibly encode the app to use some sort of VPN or maybe add a
front end server to autheticate the SQL users first, change the port and pas
s
to the back-end sql server?... I dont know really... can someone please
provide me with some design suggestions to take to my developers in order to
secure and encrypt there SQL sessions for their appications' I am able to
design hardware solutions to assist with this too!
I know its best practices to NOT have SQL open, but this late in the game,
it would take a miracle to get all our customers to change ports. Thanks for
your timely suggestions!!"Scott" <Scott@.discussions.microsoft.com> schrieb im Newsbeitrag
news:CE23D173-4B46-4AB3-B139-4664E65B58B3@.microsoft.com...
> Hi experts,
> I have an application that my company designed and sold to users years ago
> that requires SQL port 1433 to be open to the Internet. (Insert .. shame a
> you here!).
There you are :-)

> There is basically a straight NAT statement from our firewall to the SQL
> server that allows ALL inbound traffic to SQL. I am looking for the best
> method to secure this connection from the application side (it is under
> rewrite). Possibly encode the app to use some sort of VPN or maybe add a
> front end server to autheticate the SQL users first, change the port and
> pass
> to the back-end sql server?... I dont know really... can someone
> please
> provide me with some design suggestions to take to my developers in order
> to
> secure and encrypt there SQL sessions for their appications' I am able to
> design hardware solutions to assist with this too!
I wouldnt code that on my own, I would suggest using a software VPN client
which establishs a conection to the internal network and use the SQLServer
the old fashioned way. Exposing the SQLerver is always risky because your
are exposing productional data to the internet and to possible hackers. Even
if you are coding of 99% solution, that would bring nightmares if I would be
responsible for that.
SO my suggestion would be to use a hardware solution on the one sideand a
software / hardware solution on the other side implementing VPN (perhaps, if
you have money left to implement some securiyt with some kind of external
certification /smartcard solution)

> I know its best practices to NOT have SQL open, but this late in the game,
> it would take a miracle to get all our customers to change ports. Thanks
> for
> your timely suggestions!!
Just my two cents for that.
HTH, Jens Suessmeyer.|||We use a hardware firewall to only let some specific IP to access the
SQLServer through the Internet, until now, it is fine.
"Jens Smeyer" <Jens@.Remove_this_For_Contacting.sqlserver2005.de> glsD:Olhu%23%23
0eFHA.1404@.TK2MSFTNGP09.phx.gbl...
> "Scott" <Scott@.discussions.microsoft.com> schrieb im Newsbeitrag
> news:CE23D173-4B46-4AB3-B139-4664E65B58B3@.microsoft.com...
> There you are :-)
>
> I wouldnt code that on my own, I would suggest using a software VPN
> client which establishs a conection to the internal network and use the
> SQLServer the old fashioned way. Exposing the SQLerver is always risky
> because your are exposing productional data to the internet and to
> possible hackers. Even if you are coding of 99% solution, that would bring
> nightmares if I would be responsible for that.
> SO my suggestion would be to use a hardware solution on the one sideand a
> software / hardware solution on the other side implementing VPN (perhaps,
> if you have money left to implement some securiyt with some kind of
> external certification /smartcard solution)
>
> Just my two cents for that.
> HTH, Jens Suessmeyer.
>

Best way to secure an exposed SQL Server

Hi experts,
I have an application that my company designed and sold to users years ago
that requires SQL port 1433 to be open to the Internet. (Insert .. shame a
you here!).
There is basically a straight NAT statement from our firewall to the SQL
server that allows ALL inbound traffic to SQL. I am looking for the best
method to secure this connection from the application side (it is under
rewrite). Possibly encode the app to use some sort of VPN or maybe add a
front end server to autheticate the SQL users first, change the port and pass
to the back-end sql server?... I dont know really... can someone please
provide me with some design suggestions to take to my developers in order to
secure and encrypt there SQL sessions for their appications' I am able to
design hardware solutions to assist with this too!
I know its best practices to NOT have SQL open, but this late in the game,
it would take a miracle to get all our customers to change ports. Thanks for
your timely suggestions!!"Scott" <Scott@.discussions.microsoft.com> schrieb im Newsbeitrag
news:CE23D173-4B46-4AB3-B139-4664E65B58B3@.microsoft.com...
> Hi experts,
> I have an application that my company designed and sold to users years ago
> that requires SQL port 1433 to be open to the Internet. (Insert .. shame a
> you here!).
There you are :-)
> There is basically a straight NAT statement from our firewall to the SQL
> server that allows ALL inbound traffic to SQL. I am looking for the best
> method to secure this connection from the application side (it is under
> rewrite). Possibly encode the app to use some sort of VPN or maybe add a
> front end server to autheticate the SQL users first, change the port and
> pass
> to the back-end sql server?... I dont know really... can someone
> please
> provide me with some design suggestions to take to my developers in order
> to
> secure and encrypt there SQL sessions for their appications' I am able to
> design hardware solutions to assist with this too!
I wouldn´t code that on my own, I would suggest using a software VPN client
which establishs a conection to the internal network and use the SQLServer
the old fashioned way. Exposing the SQLerver is always risky because your
are exposing productional data to the internet and to possible hackers. Even
if you are coding of 99% solution, that would bring nightmares if I would be
responsible for that.
SO my suggestion would be to use a hardware solution on the one sideand a
software / Hardware solution on the other side implementing VPN (perhaps, if
you have money left to implement some securiyt with some kind of external
certification /smartcard solution)
> I know its best practices to NOT have SQL open, but this late in the game,
> it would take a miracle to get all our customers to change ports. Thanks
> for
> your timely suggestions!!
Just my two cents for that.
HTH, Jens Suessmeyer.|||We use a hardware firewall to only let some specific IP to access the
SQLServer through the Internet, until now, it is fine.
"Jens Süßmeyer" <Jens@.Remove_this_For_Contacting.sqlserver2005.de> ¼¶¼g©ó¶l¥ó·s»D:Olhu%23%230eFHA.1404@.TK2MSFTNGP09.phx.gbl...
> "Scott" <Scott@.discussions.microsoft.com> schrieb im Newsbeitrag
> news:CE23D173-4B46-4AB3-B139-4664E65B58B3@.microsoft.com...
>> Hi experts,
>> I have an application that my company designed and sold to users years
>> ago
>> that requires SQL port 1433 to be open to the Internet. (Insert .. shame
>> a
>> you here!).
> There you are :-)
>> There is basically a straight NAT statement from our firewall to the SQL
>> server that allows ALL inbound traffic to SQL. I am looking for the best
>> method to secure this connection from the application side (it is under
>> rewrite). Possibly encode the app to use some sort of VPN or maybe add a
>> front end server to autheticate the SQL users first, change the port and
>> pass
>> to the back-end sql server?... I dont know really... can someone
>> please
>> provide me with some design suggestions to take to my developers in order
>> to
>> secure and encrypt there SQL sessions for their appications' I am able
>> to
>> design hardware solutions to assist with this too!
> I wouldn´t code that on my own, I would suggest using a software VPN
> client which establishs a conection to the internal network and use the
> SQLServer the old fashioned way. Exposing the SQLerver is always risky
> because your are exposing productional data to the internet and to
> possible hackers. Even if you are coding of 99% solution, that would bring
> nightmares if I would be responsible for that.
> SO my suggestion would be to use a hardware solution on the one sideand a
> software / Hardware solution on the other side implementing VPN (perhaps,
> if you have money left to implement some securiyt with some kind of
> external certification /smartcard solution)
>> I know its best practices to NOT have SQL open, but this late in the
>> game,
>> it would take a miracle to get all our customers to change ports. Thanks
>> for
>> your timely suggestions!!
> Just my two cents for that.
> HTH, Jens Suessmeyer.
>

Best way to copy database

I set up a test SQL server that I want to be exactly like the live server.
The test server is only available over the internet connected via TCP with
no network sharing or anything like that. What is the best way to copy the
data [all databases, tables & stored procedures] from my live server to the
test server? I tried using the backup wizard but it gives me an error
saying can not create share. When I use the export data function I get
errors like user account does not exists and various other errors.
Can someone suggest the best way to do this?
Bill
You should be able to use DTS.
Hilary Cotter
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com
|||When I use the Copy database wizard to create the DTS package I get an
error, "Failed to create the share OMWWIZC." I am trying to copy from a
server over the internet using TCP/IP with SQL login only. It sounds like
DTS would require windows authentication since it create shares. Is there
another way or am I wrong?
Thanks.
"Hilary Cotter" <hilary.cotter@.gmail.com> wrote in message
news:opso2q8prxrj9kur@.hcottter-lap...
> You should be able to use DTS.
> --
> Hilary Cotter
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
> Looking for a FAQ on Indexing Services/SQL FTS
> http://www.indexserverfaq.com
|||don't use the copy database wizard, use export data (right click on your
database and select all tasks to find this). I believe this option does not
require a file share.
--
Hilary Cotter
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com
"Bill" <msgdev@.hotmail.com> wrote in message
news:#kJDTcrPFHA.3292@.TK2MSFTNGP12.phx.gbl...
> When I use the Copy database wizard to create the DTS package I get an
> error, "Failed to create the share OMWWIZC." I am trying to copy from a
> server over the internet using TCP/IP with SQL login only. It sounds like
> DTS would require windows authentication since it create shares. Is there
> another way or am I wrong?
> Thanks.
>
> "Hilary Cotter" <hilary.cotter@.gmail.com> wrote in message
> news:opso2q8prxrj9kur@.hcottter-lap...
>
|||I managed to get most of the data over using export data but I am having a
problem with one database. It looks like there is a NT account added as a
login "<Domain>\Doman users." The error I get now is related to this user
not being on the new server. The servers are part of two different domains
so there is no way, that I know of, to add this user to the new server. I
am not the one who originally set up the server so I don't want to make any
changes to the live server if possible. Is there anyway to get around this
error?
"Hilary Cotter" <hilary.cotter@.gmail.com> wrote in message
news:uSRXjnrPFHA.3144@.tk2msftngp13.phx.gbl...
> don't use the copy database wizard, use export data (right click on your
> database and select all tasks to find this). I believe this option does
> not
> require a file share.
>
> --
> --
> Hilary Cotter
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
> Looking for a FAQ on Indexing Services/SQL FTS
> http://www.indexserverfaq.com
> "Bill" <msgdev@.hotmail.com> wrote in message
> news:#kJDTcrPFHA.3292@.TK2MSFTNGP12.phx.gbl...
>

Best way to connect to a remote SQL server using the internet.

Can any one suggest me the best way to connect to a remote SQL server using
the internet.
The option that I know is: Use of remote IP address to connect. Is there any
other options availabe to access the SQL server like using ASP pages or some
thing else. ?
I want to ensure that the connection is stable and the speed is good.
If you can suggest me any site where I can look for optimising SQL Server on
the internet, it would be useful.
FYI - I am using VB as the Front End.
Thanks and Regards,
PeriHey Peri,
I have used SQL Server 2000 with Visual Basic 6.0, Visual Basic.Net and ASP.
Net. All you really have to do is when you use for example an ADO connection
, pass the server's ip instead of its name. If it is located with your netwo
rk you can use the servers
name. You don't really need any special settings on the server. Just make su
re it has a public ip and no firewall is blocking any ports. There is a port
that SQL uses but I am not totally sure which one it is. ]
Danny Cabrera
dcabrera@.medstarholdings.com
System Programmer