I want to connect a desktop app to a SQL Server using internet, not local network. The app will run on every network in the world with internet and the data will retrieve and send from my PC using SQL Server... Do you know how I do that? I have forwarded the TCP 1433 ports in my DLINK router, and allow in the Windows Firewall, I have tried connect with my public IP into the SSMS but the server does not found. Only using my private IP given by my router 192.168.0.XXX.

I have a peculiar issue with some database connections: I've got this (test) script on 2 different servers: $link = mysql_connect($db_server, $db_user, $db_passwd); if (!$link) { die('Could not connect: ' .mysql_errno().":". mysql_error()); } else { echo 'Connected successfully'; } mysql_close($link); exit; On one server, there's no issue at all. On the other server, the connection is refused from time to time, with the following message: Could not connect: 2002:Operation not permitted Obviously, both hosts aren't blocked by the db server firewall (but I've explicitly whitelisted the problematic IP address anyway) Most forums indicate it might be a problem with the lock file, mysql-server not running, or any global issues, but it seems like this specific remote host is blocked, all other websites and remote hosts connect perfectly. I've attempted to set the global max_connect_errors to 10.000 , but that didn't help either. I do believe it has to do with connection errors from the offending server. It has some slow query issues already, and with the site being visited more often, the issue comes back more frequently. After (exactly) ten minutes, the remote host is unblocked again, and everything works as it should. I've also tried restarting mysqld, rebooting the server. But I'm running out of options. Any thoughts on how to prevent this, or at least resolve it when the issue occurs?

We have an ssis package on a sql server that uses a web service task to run a simple c# iis web service on a different non-sql server that runs a set of py files using System.Process. The py files run some ArcGIS Pro processes that output tables in a third (sql) server. We’d like to see if we can take the web service out of the mix. Can an ssis package execute a remote python file under the security context of a service account (for the local ArcGIS licensing and the sql table creation)? Thanks!

MariaDB 10.3.27. Debian 10 Buster. I've followed the instructions to grant remote access to a user to my remote MariaDB server: 1. Edited /etc/mysql/my.cnf: [mysqld] #skip-networking #bind-address = skip-networking=0 skip-bind-address 0. Created a user: CREATE USER 'theuser'@'%' IDENTIFIED BY 'mypass'; GRANT ALL PRIVILEGES ON *.* TO 'theuser'@'%' IDENTIFIED BY 'mypass' WITH GRANT OPTION; FLUSH PRIVILEGES; SELECT User, Host FROM mysql.user WHERE Host 'localhost'; +---------+------+ | User | Host | +---------+------+ | theuser | % | +---------+------+ 0. Restarted MariaDB: $ sudo systemctl restart mariadb $ systemctl status mariadb ● mariadb.service - MariaDB 10.3.27 database server Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset: enabled) Active: active (running) since Mon 2021-05-17 01:00:59 -03; 20min ago 0. Opened the 3306 port: $ sudo ufw allow 3306/tcp $ sudo ufw status | grep 3306 3306 ALLOW Anywhere 3306/tcp ALLOW Anywhere 0. Checked open port locally: $ nmap -p3306 remote_ip PORT STATE SERVICE 3306/tcp open mysql But when I try to access from my local machine to the remote server: $ mysql -utheuser -pmypass -hremote_ip mysql: [Warning] Using a password on the command line interface can be insecure. ERROR 1045 (28000): Access denied for user 'theuser'@'my_ip' (using password: YES) I'm missing something or there are some errors I can't see?

My MariaDB server accepts connections at port 43210 without problems on the public IP address of, we'll say, 123.123.123.123 on eth0. This is on an Ubuntu 18.04 server that also has 192.168.1.10 configured for eth0. I have a user configured to with permissions for all hosts (%):

+------------------+-----------+
| user             | host      |
+------------------+-----------+
| myuser           | %         |
...

From a remote server (another host that is on the same LAN) I can connect to the public IP address of this MariaDB server:

$ mysql --user=myuser -pMYPASSWORD --host=123.123.123.123 --port=43210 mydatabase
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 340
Server version: 10.2.31-MariaDB-1:10.2.31+maria~bionic-log mariadb.org binary distribution
...

However, the problem is that when I try to connect to the LAN IP address, mysql times out:

$ mysql --user=myuser -pMYPASSWORD --host=192.168.1.10 --port=43210 mydatabase
ERROR 2003 (HY000): Can't connect to MySQL server on '192.168.1.10' (110 "Connection timed out")

Just to verify, netstat -tlpn | grep mysql shows it is listening on 0.0.0.0 which should be listening on all interfaces (I believe including the local IP):

tcp        0      0 0.0.0.0:43210           0.0.0.0:*               LISTEN      964/mysqld

I also run PostgreSQL on this same server with MariaDB and if I connect remotely from the same other test host from which I'm trying to make the mysql connection, it connects without a problem:

$ pg_isready -d mydb -h 192.168.1.10 -p 43211 -U myuser
192.168.1.10:43211 - accepting connections

The point of the last note about PGSQL is that I just want to clarify that connections are able to get through to the actual Linux server itself, just not MariaDB. I have also disabled the UFW firewall temporarily in order to keep that out of the equation. ***What could be going wrong here? What can I test further to isolate the problem?*** I suspect that perhaps the bind-address = 0.0.0.0 in /etc/mysql/mariadb.conf.d/50-server.cnf may be the problem, but I thought that the quadruple 0 was in fact able to handle this.

When getting a query result from a remote server, does the execution of the query transmit the result to the local machine, or is it buffered on remote and only downloaded when fetching the result? Here is how the cursor is defined: con = psycopg2.connect(f"host='{host}' port='{port}' dbname='{DB}' user='{user}' password='{pw}'") cur = con.cursor()

I've been researching and googling for 10 hours and couldn't find anything, so I decided to ask here. I'm looking for a command line tool or a script (running under windows) that can backup a remote SQL Server to a local file (.sql, SQL Server backup, even CSV, all formats are acceptable). P.S. I can't use remote SMB share for backing up DB. Also no GUI, just command line or scripts P.P.S. The DB is in remote location and I want to backup the data in Database to any format possible in my local machine (Windows server, no SMB share connection in between available/possible)

i have some linkedserver and for it created default maping that mapping list is empty and all goes thrue 'Be made using this seciurity context' and this works fine - i can querry this linked from any user that have sysadmin role but when i have user that is public only then i get that failed - 'there is no mapping exists for user x' how can i fix that? is there some special permission that i need to apply ? it is MSSQL 2019 scripted linked is: EXEC master.dbo.sp_addlinkedserver @server = N'PB01_ENC', @srvproduct=N'', @provider=N'SQLNCLI', @datasrc=N'x.x.x.x,9945'@provstr=N'Encrypt=yes;TrustServerCertificate=yes;' EXEC master.dbo.sp_addlinkedsrvlogin @rmtsrvname=N'PB01_ENC',@useself=N'False',@locallogin=NULL,@rmtuser=N'xxx',@rmtpassword='########' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'collation compatible', @optvalue=N'false' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'data access', @optvalue=N'true' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'dist', @optvalue=N'false' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'pub', @optvalue=N'false' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'rpc', @optvalue=N'true' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'rpc out', @optvalue=N'true' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'sub', @optvalue=N'false' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'connect timeout', @optvalue=N'0' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'collation name', @optvalue=null EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'lazy schema validation', @optvalue=N'false' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'query timeout', @optvalue=N'0' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'use remote collation', @optvalue=N'true' EXEC master.dbo.sp_serveroption @server=N'PB01_ENC', @optname=N'remote proc transaction promotion', @optvalue=N'true' others linked but not encrypted works fine am i missing something here maybe? even if i add specyfic mapping for this public user - with password or via impersonate - stil the same :/ please advice best regards !

I want access to remote cassandra with one ip address. how can I change cassandra.yaml to block all ip address except ip that I want to connect? Can I do by cassandra.yaml ?

What's the most painless way to create something like a proxy server so that my dev team can access a database from anywhere? The server in question is a managed MongoDB database. Currently, I am just whitelisting IP addresses in the dashboard for the managed database as needed, but this is not sustainable, especially as the team grows. I would like to whitelist a single IP address to a proxy server, and do something like add a public SSH key to that proxy server for each machine. But here are my obstacles: 1. I am not a networking expert or sysadmin - I'd be worried about making a mistake and creating a security hole in the proxy server. I also just don't like doing networking stuff. I wish there was some kinda SaaS service for this exact purpose 2. How do I enable MongoDB GUI access through the proxy server? Closest thin I could find here is this , which is what I'm trying to move away from

I have two IPs (**192.168.13.1** and **192.168.13.2**) in my **Server A** and have provided select access to another **Server B** for *secondary IP/virtual IP* (192.168.13.2). mysql> show grants for web_app@192.168.13.2; +------------------------------------------------------------------------------------------------------------------------------+ | Grants for user@192.168.13.2 | +------------------------------------------------------------------------------------------------------------------------------+ | GRANT SELECT, INSERT ON *.* TO 'user'@'192.168.13.2' IDENTIFIED BY PASSWORD '*pass' | +------------------------------------------------------------------------------------------------------------------------------+ 1 row in set (0.00 sec) When I tried to connect mysql of Server A to Server B ( from Linux ), **Primary IP** is trying to connect to MySQL and access is getting denied [root@13-1 ~]# mysql -h 192.168.12.1 -u user -p Enter password: ERROR 1130 (HY000): Host '192.168.13.1' is not allowed to connect to this MySQL server Then I give **exactly** the same grants for 192.168.13.1 and I was able to login. My application running in 192.168.13.2 trying to fetch from remote server was also not working until I give grants for **primary IP**. My ifconfig details:: [root@13-1 ~]# ifconfig | grep inet inet 192.168.13.1 netmask 255.255.254.0 broadcast 192.168.13.255 inet 192.168.13.2 netmask 255.255.254.0 broadcast 192.168.13.255 inet 192.168.13.3 netmask 255.255.254.0 broadcast 192.168.13.255 I have two questions: 1. How to mysql remote login **from** a specific IP ( in my case, from 192.168.13.2 ) ? 2. Is it necessary for an application(with MySQL) to have grants provided for Primary IP also, even though I am trying from App in another IP ? Or Am I missing something?

I want to write PHP code to be embedded in a Drupal7 module. I want to call a procedure which can copy newly generated data in the local MySQL database to a remote MySQL database. When data is inserted in table A of my local database it should be copied to the specific table B on the remote MySQL database. Table 'A' is on local host. Table 'B' is on remote server. INSERT data on 'A' -> copied to 'B' Is this possible?

I am trying to access SQL Server 2016 from outside of my network but each time I try I get this error message. > A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified) (.Net SqlClient Data Provider) The ports on my managed firewall are open, and I have also turned off Windows Firewall too in the event that this was the blocker but I am still getting the issue. I have checked the Configuration Manager and its listening on port 1433, however, when I look at netstat -an I dont see this port is being listened on so suspect this may be where the issue exists. A question I have is if configuration manager says its listening on this port, why is it not showing in netstat? Also, what else can I try in order to gain access. Thanks

I'm trying to connect to a remote psql database. Before I added the pg_hba.conf entry with the client's IP address, I was getting an error message : xdev@xdevbox:~$ psql -U postgres testdb -h 10.1.1.47 psql: FATAL: no pg_hba.conf entry for host "10.201.50.71", user "postgres", database "testdb", SSL off I added the client's IP with trust settings. I also changed the listen address in postgres.conf on the server to listen to "*". Then I restarted the database server using /etc/init.d/postgresql restart command. Now when I try to connect, I get the following error message: psql: could not connect to server: Connection refused Is the server running on host "10.1.1.47" and accepting TCP/IP connections on port 5432? in postgresql.conf, the port is set to 5432. I'm not sure what else to check. Thanks

**Background** I need remote access from my Delphi PC application to a MySQL database hosted on a shared server at my ISP. This DB is not associated with any web site. All there is on my ISP account is the database. My application runs on half a dozen user's machines in their own homes. To give my users access I have then to set up remote hosts in cpanel. Some of the users have dynamic IP addresses. Because their IP address might change, I've written code in my application using IdHTTP that takes the user's IP, logs onto my ISP, navigates to the remote hosts page, checks if that IP is there, adds it if not and then deletes that last IP address that user used. Works, but rather complicated. I know I could put the wildcard %.%.%.% in the remote hosts and make life simpler **Question** Some posts say this is insecure and I can appreciate that but is it that insecure? After all, anyone trying to hack my database has to - know my user name and password for the ISP account - know there is a database there - know the name of the database - know the user name and password of one of the allowed database users If they know all that lot then the limiting IP address seems rather work for nothing. **Further info** I have already read these posts here , here , here and here and would point out that this is a shared hosting site so I can't get to system files or restart MySql or issue most admin commands such as GRANT ALL ON etc The reason for my question is that the ISP recently changed their cpanel software from Paper_Lantern to Jupiter, which of course changed the URL of the remote hosts page, broke my application and required me to fix the code to point to the new URL. So I am looking for a way to do this without needing to navigate to the remote hosts page.

I have a database with Oracle 12c (12.1), where when making a query locally and even from TOAD or another remote tool, it returns the response in milliseconds, reviewing the execution plan I can see that it makes correct use of the indexes created, the problem is when I run the same query (same query, same tables ... everything exactly the same) but from my application server, where I have installed an oracle instantclient and instantclient-sqlplus (12.1), it turns out that if I launch The query from there (web server), takes a long time and when I check the execution plan I can see that it does not use any of the indexes unlike the executions from other positions different from the web, evidently there is the delay when not using the indexes, I would like to know why this can happen and how I could solve it, both servers (web and database) are on the same network segment, there is no connectivity element such as a firewall or any other type of routing involved, changing the query is not an option. Thank you.

Having just set up our new SQL Server Managed Instance, restored a sample database for testing, and run Azure's vulnerability assessment, it produces this **high risk** finding: > VA2120 - Features that may affect security should be disabled > > The more SQL Server features and services you enable, the larger its > surface attack area becomes, making your system more vulnerable to > potential attacks. These fetures should be disabled unless it is > absolutely needed in this environment. > > Remediation Script: > > EXECUTE sp_configure 'show advanced options', 1; > RECONFIGURE WITH OVERRIDE; > EXECUTE sp_configure 'remote access', 0; > RECONFIGURE; > EXECUTE sp_configure 'show advanced options', 0; > RECONFIGURE; Turning to Google before doing anything, I found this Microsoft Docs article stating that (emphasis mine): > This topic is about the "Remote Access" feature. This configuration option is an **obscure** SQL Server to SQL Server communication **feature that is deprecated, and you probably shouldn't be using it**. Can anyone therefore please provide some clarity on the following? 1. Why is it enabled given Microsoft's description? 2. Does it need to be enabled in Azure SQLMI? Because... 3. When I run the remediation script I get this error: > Changes to server configuration option remote access are not supported in SQL Database Managed Instances.

I have an Oracle Database installed on Oracle Linux Server which I'm trying to connect to from my PC. I have configured the listener in the following way

[oracle@ol8ngs1 ~]$ lsnrctl status

LSNRCTL for Linux: Version 19.0.0.0.0 - Production on 25-JUN-2021 13:30:15

Copyright (c) 1991, 2021, Oracle.  All rights reserved.

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=10.30.11.86)(PORT=1539)))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 19.0.0.0.0 - Production
Start Date                25-JUN-2021 11:18:41
Uptime                    0 days 2 hr. 11 min. 34 sec
Trace Level               off
Security                  OFF
SNMP                      OFF
Listener Parameter File   /oracle/app/oracle/product/19.0.0/dbhome_1/network/admin/listener.ora
Listener Log File         /oracle/app/oracle/diag/tnslsnr/ol8ngs1/listener/alert/log.xml
Listening Endpoints Summary...
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=10.30.11.86)(PORT=1539)))
  (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1521)))
Services Summary...
Service "orcl" has 1 instance(s).
  Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully

The listener is started and it's status is OK, so the connection should be possible from a remote location. However, when trying to connect to it through SQL *Plus first it says connected to the database but executing any query on it returns **ORA-03114: not connected to ORACLE** error. I have also tried to connect to it through SQL Developer, but that returns: *Status : Failure -Test failed: IO Error: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond, Authentication lapse 0 ms.* What's even more perplexing is that the connection is possible through other PC's, as I asked one more person in the company if he can connect to the database through SQL Developer. What I have tried so far: - Change the database port - Allow the inbound and outbound rules for the 1539 port - Configure different services - Different hostname for database Here are the contents of listeners.ora file on the server:

# listener.ora Network Configuration File: /oracle/app/oracle/product/19.0.0/dbhome_1/network/admin/listener.ora
# Generated by Oracle configuration tools.

SID_LIST_LISTENER =
  (SID_LIST =
    (SID_DESC =
      (GLOBAL_DBNAME = orcl)
      (ORACLE_HOME =  /oracle/app/oracle/product/19.0.0/dbhome_1)
      (SID_NAME = orcl)
    )
   )

LISTENER =
  (DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = TCP)(HOST = 10.30.11.86)(PORT = 1539))
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
    )
  )

LOCAL_OS_AUTHENTICATION_LISTENER = OFF

And here are the contents of tnsnames.ora

# tnsnames.ora Network Configuration File: /oracle/app/oracle/product/19.0.0/dbhome_1/network/admin/tnsnames.ora
# Generated by Oracle configuration tools.

LISTENER_ORCL =
  (ADDRESS = (PROTOCOL = TCP)(HOST = 10.30.11.86)(PORT = 1539))


ORCL =
  (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = 10.30.11.86)(PORT = 1539))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = orcl)
    )
  )

OS is openSUSE Tumbleweed. Previously I had PostgreSQL 13 installed. I just removed it by:

> sudo zypper rm 'postgres*'

> sudo zypper rr PostgreSQL

> sudo rm -rf /usr/local/var/postgres

Then I install PostgreSQL 12 by instructions [here](https://en.opensuse.org/SDB:PostgreSQL) :

> sudo zypper addrepo http://download.opensuse.org/repositories/server:database:postgresql/openSUSE_Tumbleweed/  PostgreSQL

> sudo zypper ref

> sudo zypper in -f postgresql postgresql-server postgresql-contrib

> sudo zypper in -f postgresql-plperl postgresql-plpython postgresql-pltlc

> sudo systemctl enable postgresql

> sudo systemctl start postgresql

But the database status is faulty:

> sudo systemctl status postgresql.service  
[sudo] password for root:  
● postgresql.service - PostgreSQL database server
     Loaded: loaded (/usr/lib/systemd/system/postgresql.service; enabled; vendor preset: disabled)
     Active: failed (Result: exit-code) since Thu 2021-05-27 23:08:43 EDT; 2h 10min ago
    Process: 1576 ExecStart=/usr/share/postgresql/postgresql-script start (code=exited, status=1/FAILURE)
        CPU: 21ms

May 27 23:08:43 localhost systemd: Starting PostgreSQL database server...
May 27 23:08:43 localhost postgresql-script:  Your database files were created by PostgreSQL version 13.
May 27 23:08:43 localhost postgresql-script:  Could not find executables for this version.
May 27 23:08:43 localhost postgresql-script:  Please install the PostgreSQL server package for version 13.
May 27 23:08:43 localhost systemd: postgresql.service: Control process exited, code=exited, status=1/FAILURE
May 27 23:08:43 localhost systemd: postgresql.service: Failed with result 'exit-code'.
May 27 23:08:43 localhost systemd: Failed to start PostgreSQL database server.

For some reason, whatever I try, I cannot get rid of these status errors: > Your database files were created by PostgreSQL version 13. > > Could not find executables for this version. > > Please install the PostgreSQL server package for version 13. How can I install PostgreSQL 12 and get rid of PostgreSQL 13 database files?

I've configured a remote Sql server on host machine. I have performed the follwing steps : Under Remote Server Connections, check the box against "Allow remote connections to this server". Make sure that the TCP/IP Protocol Name is Enabled. Navigate to the IP Addresses tab and scroll down to the section named "IPAII". If the TCP Dynamic Ports is set to 0 (indicates the Database Engine is listening on dynamic ports), then remove the 0 and set it to blank. Update the value for TCP Port to 1433. Restart the service.  Windows Firewall setting inbound rule TCP, port 1433 , Allow the connection  Using this setup I'm able to connect from SSMS using aa.aaa.aa.aaa\SQLEXPRESS and from c# app using the following aa.aaa.aa.aaa\SQLEXPRESS,1433. I would like also to be able to connect using the host name instead of ip address. Is this possible? I have tried in SSMS using hostname\SQLEXPRESS or hostname\SQLEXPRESS,1433 but it doesn't connect and an error is shown saying : A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 0 - The wait operation timed out.) (Microsoft SQL Server, Error: 258) I should be able to connect also via the machine name. For local sql server it works to connect via hostname\sqlinstance.