ODBC and security

[jfmcel]

I am reposting this here, as I got no response so far on the security forum.

I am working with an organization that is going to put one FM client outside the firewall to talk to their ISPs database. The ISPs database will periodically query the FM client for new records to upload. I have given them a password with browse and export privileges.

The problem I see is that in general, the organization has been very lax about passwords. I am thinking it could be possible for someone sniffing around to find the IP address and that there is an ODBC database there. By trying common passwords, they might take over the database.

Is this a realistic possiblity? Should we I get everyone to change their passwords, or can I set-up the client to talk to only one IP address. The client is running Window 2000.

Thanks in advance for your help.