1. Windows SQL Server
| |
Windows SQL Server
SQL Server 2008
SQL Server
SQL Server SQL Server Microsoft Windows
Windows
SQL Server
Windows Firewall with Advanced Security and IPsec Windows IPsec Windows Firewall with
Advanced Security - Content Roadmap Windows -
“ ” “Windows ” Windows Microsoft (MMC)
Windows
Analysis Services Windows
Integration Services Windows
Analysis Services
Reporting Services
Integration Services
“ ” “Windows ”
Windows
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

2. Windows SQL Server
TCP/IP
SQL Server
Getting Started with Windows Firewall with Advanced Security in Windows Vista and Windows Server 2008 Windows Vista
Windows Server 2008 Windows
Windows Firewall with Advanced Security Design Guide Windows
Introduction to Server and Domain Isolation
��
Windows Server 2008
Windows Server 2003
Windows Vista
Windows XP Service Pack 2
Windows XP Service Pack 1
Windows
“ ” “Windows ”
“ ” “Windows ”
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

3. Windows SQL Server
“ ” “Windows ”
“ ” “Windows ”
Getting Started with Windows Firewall with Advanced Security in Windows
Vista and Windows Server 2008 Windows Vista Windows Server 2008 Windows
“ ” “Windows ”
“ ” “Windows ”
“ ” “Windows ”
run “ ” “Windows ”
“Windows ”
1. “ ” “ ” firewall.cpl
2. “ ”
Microsoft (MMC)
Windows MMC Microsoft Vista Windows
Server 2008
Windows
netsh
netsh.exe Windows
netsh (.dll)
netsh SQL Server
Microsoft Windows Vista Windows Server 2008 advfirewall
netsh netsh
TCP 1433
netsh firewall set portopening protocol = TCP port = 1433 name = SQLPort mode = ENABLE scope = SUBNET profil
e = CURRENT
Windows
netsh advfirewall firewall add rule name = SQLPort dir = in protocol = tcp action = allow localport = 1433
remoteip = localsubnet profile = DOMAIN
netsh SQL Server Windows XP Service Pack 2
SQL Server netsh
Netsh.exe
“netsh advfirewall firewall” “netsh firewall” Windows Server 2008 Windows Vista
Windows
“netsh firewall” “profile=all” Windows Vista
Windows XP Service Pack 2 Windows
SQL Server
SQL Server
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

4. Windows SQL Server
TCP TCP 1433
SQL
Server
TCP SQL
Server Browser UDP 1434
SQL
Server
SQL
Server
TCP 1434 (DAC)
DAC
SQL UDP 1434 SQL Server Browser
Server TCP
Browser SQL Server Browser
SQL Server Browser
HTTP CLEAR_PORT URL HTTP
HTTP TCP 80 SSL_PORT
443
SQL
Server
TCP 443 URL HTTPS HTTPS
HTTPS (SSL) HTTP
SQL
Server
Service TCP 4022 SQL Server Service Broker
Broker
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

5. Windows SQL Server
SELECT name, protocol_desc, port, state_desc
FROM sys.tcp_endpoints
WHERE type_desc = 'SERVICE_BROKER'
TCP
7022
SELECT name, protocol_desc, port, state_desc
FROM sys.tcp_endpoints
WHERE type_desc = 'DATABASE_MIRRORING'
SQL Server HTTP IIS
TCP 1433 80 IIS
1433 SQL Server
Web FTP/UNC
FTP Web FTP IIS SQL
FTP TCP 21 Server IIS
HTTP TCP 80 TCP
137 138 139
Configuring Microsoft Internet
Security and Acceleration Server for Microsoft SQL Server
2000 Replication over the Internet Internet
Microsoft SQL Server 2000 Microsoft Internet
Security and Acceleration Server
Transact- TCP 135 Visual Studio Visual Studio
SQL Devenv.exe “ ” TCP
135 135
IPsec Management Studio Management Studio
ssms.exe “ ”
TCP 135 Transact-
SQL
Windows Windows
SQL Server Express
TCP 1433
TCP
sqlservr.exe SQL Server
Windows MMC “ ” “ ”
Service Pack SQL Server
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

6. Windows SQL Server
“ ” “Windows ” Windows MMC
Windows
“ ” “Windows ”
1. “ ” “Windows ” “ ” “ ”
2. SQL Server C:Program FilesMicrosoft SQL ServerMSSQL10.<
>MSSQLBinn sqlservr.exe “ ”
3. “ ”
TDS (Transact-SQL)
Analysis Services
Analysis Services
Analysis Services Analysis Services
TCP 2383
SQL Server Analysis Services Analysis Services
Browser TCP 2382 SQL Server Browser SQL Server Browser
2382
TCP 80 URL HTTP
IIS/HTTP
Analysis Services
PivotTable®
Service HTTP
HTTPS
TCP 443 URL HTTPS HTTPS (SSL) HTTP
IIS/HTTPS
Analysis Services
PivotTable®
Service HTTP
HTTPS
IIS Internet Analysis Services IIS
Analysis Services 2389 2382
Analysis Services Windows Analysis Services Windows
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

7. Windows SQL Server
Reporting Services
Reporting Services
Reporting Services TCP URL Reporting Services HTTP “
Web (HTTP)”
80
HTTPS TCP URL HTTPS HTTPS (SSL) HTTP
Reporting “ (HTTPS)”
Services 443
Reporting Services Analysis Services Reporting Services
Windows
Integration Services
Integration Services
Microsoft TCP 135 Integration Services 135 DCOM 135
(MS RPC) Integration Services
Integration 135
Services Management Studio Integration Services
Integration Services Windows Integration Services Windows
Integration Services Windows
SQL Server
Windows Management WMI SQL Server WMI
Instrumentation Windows Management Instrumentation (WMI)
DCOM
WMI WMI TCP
WMI 135
135
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

8. Windows SQL Server
Microsoft TCP 135
(MS DTC) Microsoft (MS DTC) MS DTC
135 MS DTC SQL Server
“ ”
MS DTC
sqlservr.exe
Management Studio UDP 1434 UDP
UDP SQL
Server Browser UnicastResponsesToMulticastBroadcastDisabled
SQL Server Property of the INetFwProfile Interface INetFwProfile
Browser UnicastResponsesToMulticastBroadcastDisabled
UDP
TRUE
FALSE 3
SQL Server
IPsec UDP 500 UDP IPSec UDP 4500
4500 UDP 500 Windows “
” IPsec
Windows
Windows
SQL Server Windows SQL Server Enable a network for cluster use
HTTP API (HTTP.SYS) TCP HttpCfg.exe HTTP.SYS SQL Server
URL 80 Http.sys URL
HTTP
HTTPS
135
RPC TCP/IP UDP/IP 1024
TCP/IP UDP/IP “ RPC ” RPC RPC
RPC RPC
RPC 135
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

9. Windows SQL Server
135
135
Windows
RPC
Using Distributed COM with Firewalls COM
Remote procedure call (RPC) (RPC)
RPC
Windows 2000 Startup and Logon Traffic Analysis Windows 2000
Windows
“ (HTTP)” “ (HTTPS)” IIS
80 443 80 443 SQL Server IIS
SQL Server 80 443 IIS
Windows MMC 80
80
80 SQL Server
Getting Started with Windows Firewall with Advanced Security in Windows Vista and Windows Server 2008 Windows Vista
Windows Server 2008 Windows Network location-aware host firewall
Windows Vista Windows Server 2008
Windows
Windows
Internet
1.
2.
3.
Windows MMC “ ” “Windows ”
“ ” “Windows ”
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

10. Windows SQL Server
“ ” “Windows ”
“ ” “Windows ”
1. “ ” “Windows ” “ ” “ ” “ ”
2. “ ” “ ” “ ”
3.
( Internet )
Internet
(NAT) “ ”
( )
“ ”
IP “ ( )” DHCP
IP IP
IP “ ”
IP
Windows
Vista Windows Server 2008 Windows MMC
“ ” “Windows ”
(NAT)
IPsec
1. “ ” “ ” WF.msc “ ”
2. “ Windows ” “ ” “ ”
3. “ ”
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]

11. Windows SQL Server
Windows MMC
SQL Server TCP/IP
netstat TCP netstat
IP
TCP/IP
1.
2. netstat -n -a
-n netstat TCP -a netstat TCP
UDP
PortQry TCP/IP
PortQry Microsoft
Troubleshooting Windows Firewall with Advanced Security in Windows Vista and Windows Server 2008 - Diagnostics and
Tools Windows Vista Windows Server 2008 Windows -
Analysis Services -
(Reporting Services)
(Integration Services)
Windows
SQL Server 2008
sql
$0$0 $0$0 $0$0 $0$0 $0$0
2010/8/27
http://msdn.microsoft.com/zh-cn/library/cc646023(SQL.100).aspx[2010/8/29 22:52:52]