Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » MS-SQL Server Resolution Service Problem
  •  
fishtech

Messages: 617
Karma: 13
Send a private message to this user
Just received a notification from ATT that:

...one or more hosts using your Internet connection are running an MS-SQL Server Resolution Service (MC-SQLR) that is open to the Internet.


There are no devices on the network using MS-SQL. Could this be something on Control?

Thanks,

ft.
  •  
Brian (GFI/Kerio)

Messages: 727
Karma: 70
Send a private message to this user
Did they provide any details such as how they detected this, why is it an issue, and how it should be remedied?

Brian Carmichael
Instructional Content Architect
  •  
fishtech

Messages: 617
Karma: 13
Send a private message to this user
Here is the extra info,
ft.


The IP address xxx.xxx.xxx.xxx was observed with publicly accessible MC-SQLR on July 23, 2017 at 9:18 PM CDT. Our records indicate that this IP address was assigned to you at this time.

Incident details for xxx.xxx.xxx.xxx

Port: US

MC-SQLR can be abused to reveal details about your computers, and also for denial-of-service attacks against other computers. Please consider using a firewall to restrict access to port US to specific IP addresses; or disabling MC-SQLR on your computer(s) if it is not needed. Detailed information about MC-SQLR abuse and how to mitigate it is available at http://tools.cisco.com/security/center/viewAlert.x?alertId=3 7132.
Regards,
AT&T Internet Services Security Center
  •  
Brian (GFI/Kerio)

Messages: 727
Karma: 70
Send a private message to this user
It seems your ISP does some periodic scan and noticed that this port is open on your firewall. I don't know your IP address so it's difficult to confirm if in fact it's still valid. I presume the IP address they listed belongs to your Kerio Control firewall. Note that by default all inbound ports are closed, unless you've specifically created a port mapping rule, or permitted access to the administration or VPN services.

Brian Carmichael
Instructional Content Architect
Previous Topic: FTP Issue
Next Topic: Kerio Control vulnerable ? Stack Clash ?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Aug 19 22:39:07 CEST 2017

Total time taken to generate the page: 0.00436 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.