How to PROPER secure your servers! [Must read for developers]

[Danco1990]

/No support on ePvPers

[AriezOMG]

Danco told me to close it after I got hacked, and so I did :/ I haven't been able to get hacked since, but there is an inconvenience. That is having the server host be the only one able to access the SQL. Convient because it's not hackable, yet inconvenient because you have to do it all yourself.

[jamessimpler]

Glad u pointed this out. This is good information and THANK YOU!

Call me a nub but what do u mean by using proxy server? I mean how u use the proxy server for the private server purpose? Any example to show what u mean? Thanks

Client ---> Proxy Server (Server IP:192.168.0.1) ----> PSM (Server IP:192.168.0.2 ) ------> SQL (Server IP: 192.168.0.3)?

Is this what u mean?

Originally Posted by Danco1990

Ok here is the deal, people did NOT use any SQL Inject query or whatsoever. The hacking proces is WAY easier... In some guides it has been said to forward these ports:
.....

I hope i've helped you guys out, if you have anything to add, state it here and ill put it in the guide and put your name in the credits. If i've helped you, i always appriciate a simple "Thanks".

Danco1990

[hackin]

This way no one gets hacked #STICKY REQUEST!!Everyone should do this to perevnt from being hacked,important to everyone.

[EvilWarriorReturns]

should be stickied
very helpful indeed

[ShaiyaEternity]

This is amazing ^^!

[HolyWater93]

request sticky too! thank you

[lilprohacker]

the best way to secure your sql db is to prevent the sql db from accepting connections from outside sources.

1: run SQL Server Configuration Manager
2. goto the Protocols for your db
3. goto TCP/IP and double click it
4. Under the Protocol Tab change the Listen All to "No"
5. Under the IP addresses change all the IP addresses "Enabled" to "No" Except for IP 127.0.0.1

What this does it makes the sql server not accept connections on any of the ip addresses except for the local one.

[AriezOMG]

lilpro can we make this work in reverse to only let certain ip's in our SQL?

[EvilWarriorReturns]

some1 sticky this post
chop chop!!

[ShaiyaOverLords]

Portforward all shaiya server ports then port 1433 TCP you select allowed users then go to IP cow on your computer then copy and past problem solved

The ports that you need to forward are :
SQL - port 1433 - protocol - TCP
SQL - port 1433 - protocol - UDP (for the hell of it)
login - port 30800 - protocol - TCP
game -port 30810 - protocol TCP
session - port 30900 - protocol TCP
userlog - port 30901 - protocol TCP
dbagent - port 30911 - protocol TCP
gamelog - port 30912 - protocol TCP
Psmagent - port 40900 - protocol TCP
connectionManager - port 1060 - protocol TCP
dbagent2 - port 1056 - protocol TCP
gamelog - port 1072 - protocol TCP