John,

>>John,
>>
>>Do you advocate using (for example) TCP/IP on one card and, say, IPX on the other? I've heard that this is about as secures as it gets though I have had some folks say that if an attacker gets access to the first computer they could use the connection to gain access to the second.
>>
>>Seems to me that if the IP-based machine was only allowed to hit specific SQL ports on the 2nd and that there was a COM object containing the PW & User ID you could go a long way to being secure.
>>
>>I'd also place SQL-based Views in-between and then also encrypt/decrypt the sensitive data as well.
>>
>>Any thoughts?
>>
>Doug I am not an expert in this area and I don't really know how to make it totally safe. Probably like the stats they run on house buglaries, the harder you make the more likely they are to pick an easier target. Interestingly, having a dog in the house is better than a burglar alarm.

Hmm.. Ok... At this rate I'm expecting a sort of blend of Linux and NT, given the business case. I figure I'll 'hide' my actual data behind several 'layers' and watch it very closely.

Thanks for your thoughts...