如何将对SQL Server数据库的访问限制为特定IP？

Question

Can I restrict access to a specific database on my SQL Server 2008 database based on client IP address? If so, how do I do it? There are multiple databases on this server so we can't block access to the SERVER based on the IP, just a specific DATABASE.

Answer 1

You absolutely cannot do this at database granularity. You are talking about detecting things like queries using three part names ( [banned_db].[dbo].[table] ) and synonyms referencing the protected DB while using an unprotected DB. There just isn't any framework in place to do such. You must rely on access security (GRANT/DENY/REVOKE). At best, do what gbn suggests and separate the protected DB into it's own instance and then use Firewall rules to protect its ports.

Answer 2

Personally, I'd use security to do this. Limit access via permissions not via IP.

If you really do need IP address security (eg for banking Secrecy Jurisdictions like Switzerland or Singapore), then use separate servers

Answer 3

There is currently no way to limit access to a specific database based on the network segment you are coming from. I can see the need for this to limit access to a production DB from a stage server. I guess this is why there is the need to build different SQL servers for each environment.

I believe you can limit SQL access by application http://msdn.microsoft.com/en-us/library/bb669062.aspx