First my web site is located on a web server on a dmz. I am going threw the firewall to access the sql database. I have no problem when the server is on one network which is the internal address of the web server but I can't access a server on the other network.

Can anyone give me an idea where to start looking to fix this problem?

your ACL's in your firewall.

Hal Levy
Web Developer, PDI Inc.

NOT a Wiley/Wrox Employee

Yes! I do have 1433 open for traffic to pass through.

Which lets SQL talk.. however, that doesn't mean you can login using NTLM (different ports are required).

Since the difference is between outside and inside- You need to look at communications between the two machines. Ping from one ot the other, can you? try to telnet to the port you are using for SQL server (Don't use the default port, for security reasons) from the web box.

The web box obviously can't communicate with the SQL server- and the problem is likely in the netowrk rules.




Hal Levy
Web Developer, PDI Inc.

NOT a Wiley/Wrox Employee

I can ping the machine. How do I telenet to the machine through a specific port?

at the command prompt

telnet machinename portnumber

Hal Levy
Web Developer, PDI Inc.

NOT a Wiley/Wrox Employee

Thanks for your help! My boss finially listened to me and relized it is what I said 2 weeks ago. They need to give access to sql through the firewall.

Your boss and you should not use port 1433 if you want to increase security. select an alternate port. Makes it harder to hack.

Hal Levy
Web Developer, PDI Inc.

NOT a Wiley/Wrox Employee