Home web server?  | | |
March 26th, 2003, 08:15 PM
|
#21 (permalink)
| | Ultimate Member
Join Date: Jun 2002 Location: Vancouver, WA, USA
Posts: 2,696
|
i'd say go for apache. IIS 5 is not intented to be used by newbies and requires constant monitoring and patching. but its a great server if your up for the administration part of it. that Xitami is good too.
-Chris |
| |
March 26th, 2003, 08:20 PM
|
#22 (permalink)
| | Ultimate Member
Join Date: Dec 2002 Location: Fayetteville, NC
Posts: 1,385
|
Monitoring? I haven't had to monitor IIS before. The only thing that I have had to do to it is patch it using Windows Update. That was the first server that I used when I started programming web pages. I had never used Apache or anything else before. It was so simple for me to do. Well, different peeps have different opinions. |
| |
March 26th, 2003, 08:34 PM
|
#23 (permalink)
| | Member
Join Date: Oct 2001
Posts: 100
| |
| |
March 26th, 2003, 08:59 PM
|
#24 (permalink)
| | Ultimate Member
Join Date: Jun 2002 Location: Vancouver, WA, USA
Posts: 2,696
| Quote: |
Monitoring? I haven't had to monitor IIS before.
| frankly, IIS is a risky business if you don't check the logs about every week for something suspicious. i've caught alot of sneaky stuff that way. Quote: |
The only thing that I have had to do to it is patch it using Windows Update
| windows update only patches your windows version, not individual software. you need to go to the IIS website and use a rollup package. Quote: |
It was so simple for me to do
| yes IIS is simple. thats why code red I & II spread so efficiently 
URLScan is another thing that I'd recommend running on a IIS server. I run it on mine and almost every time a IIS vulnerbility is released, URL scan stops it without a patch. very effective.
-Chris |
| |
March 26th, 2003, 09:14 PM
|
#25 (permalink)
| | Ultimate Member
Join Date: Nov 2002 Location: Kalispell, Montana
Posts: 1,675
|
Yea what else would i probly run firewall type stuff?
__________________
Urban is back.
And yes that is how you spell my name. I am living proof that 2+2=5
dontforget/rgdesb
|
| |
March 26th, 2003, 09:30 PM
|
#26 (permalink)
| | Ultimate Member
Join Date: Jun 2002 Location: Vancouver, WA, USA
Posts: 2,696
|
definately! especially if your server is advertised in any way. Zone Alarm seems to work pretty good for just about everything. if you get REALLLLY serious you'd run a router (like IPCop) and forward port 80 to an internal machine. that way there is only one way to the server, through port 80. more secure that way. but if your just startin out, zone alarm should do
-Chris |
| |
March 26th, 2003, 09:37 PM
|
#27 (permalink)
| | Ultimate Member
Join Date: Nov 2002 Location: Kalispell, Montana
Posts: 1,675
| |
| |
March 26th, 2003, 09:58 PM
|
#28 (permalink)
| | Ultimate Member
Join Date: Dec 2002 Location: Fayetteville, NC
Posts: 1,385
|
No, WIndows Update does update IIS because when I did a new install of XP on this machine the first thing I did was go to Windows Update. It showed all kinds of updates for IIS and yes you should install the URLScan if you use it. I forgot what the pack was called that it came in but, just do a search for IIS URLScan on google and it should pop up with a link to M$ so you can download it. Yes, the best thing is to have is your machine protected by a router. Zone Alarm would be a good thing but, I would go for something else too. I currently run Norton Internet Security 2003, Sygate Firewall Pro, and I am behind a Belkin router. If the router doesn't stop something Norton catches it and if Norton doesn't catch it Sygate does. I do check my logs every week and if I keep getting things that say they are from the same person I go into Norton and permanetly block their IP. The best thing to do if you are going with ZoneEdit for you DNS is to create an A record that points to www2.yoururl.com and to your IP. Then create a webforward that points to www.youurl.com and http://yoururl.com that will forward to www2.youurl.com:175 and then cloak it. Where 575 is point it to what port you have your webserver running from. Just make sure to change the default port in IIS or whatever webserver you choose to run off of a port other than 80. That will make your computer even more secure because peeps won't be scanning for your puter. When I did that I got about 3/4 times less of peeps trying to scan my computer than what I did before when I had my webserver running from port 80. It is very handy to do this and very secure. To actually see what I mean check out the weblink. HERE |
| |
March 26th, 2003, 10:13 PM
|
#29 (permalink)
| | Senior Member
Join Date: Oct 2001 Location: Alberta, Canada
Posts: 563
|
I like this this one myself!
cheers!  |
| | | Thread Tools | Search this Thread | | | | |
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | | | | Most Active Discussions | | | | | Recent Discussions  | | | | | |