Re: Windows 2003 SBS for web server?

From: Jonathan Glass (jonathan.glass_at_gmail.com)
Date: 02/18/05

  • Next message: James Michael Stewart: "RE: CISSP without experience" 
    Date: Thu, 17 Feb 2005 23:47:34 -0500
To: Dan Tesch <dan.tesch@comcast.net>

    Do you really want to expose a Windows/IIS server to the Internet?
    Are you planning on storing any sensitive data on it? If you really
    want to use IIS, I'd strongly recommend that you (a) put it in a DMZ,
    (b) run ONLY IIS on that box, (c) rename the administrator account,
    and use that account/passwd combo on THAT box ONLY, (d) use the ODBC
    logging feature of IIS to log your IIS accesses & errors to a database
    server (you can run MySQL for free on an internal host, and install
    the MySQL ODBC drivers on the IIS box).

    If you don't have to run Active Server Pages (or any other dynamic
    content), consider a minimal installation of any Linux distro running
    the TUX web server. Much faster and easier to secure than IIS or
    Linux + Apache. If you DO need ASP, stick to IIS. If you can use
    PHP/JSP/Perl/CGIs, then consider Linux + Apache.

    Thanks & HTH

    Jonathan Glass

    On Wed, 16 Feb 2005 09:23:25 -0600, Dan Tesch <dan.tesch@comcast.net> wrote:
    > Hello, can I get some feedback on using Windows 2003 Small Business Edition
    > as a web server? Can I just turn off the Exchange stuff? What might I need
    > to
    > worry about with the built in Active Directory? - does SBS have it's own
    > line of
    > service packs?
    >
    > I have an extra license available but is this a bad idea from a security
    > standpoint
    > or other reasons?
    >
    > Thanks
    >
    > 

    -- 
Jonathan Glass
678-768-1445
  • Next message: James Michael Stewart: "RE: CISSP without experience"

    Relevant Pages

    • Re: WM5 can not sync to exchange
      ... I checked all the authentication settings and they are as you requested. ... After running the internet connection wizard I had to uncheck the Require ... On the SBS 2003 Server open the Server Management console. ... Open IIS Manager ...
      (microsoft.public.windows.server.sbs)
    • Re: OWA/RWW question
      ... Thanks, Crina, I think the latter part will help, I had at one point ... changed the IIS server IP address due to a router switch and may not ... entire Web site from the Internet" is selected. ...
      (microsoft.public.windows.server.sbs)
    • RE: Remote Web Workplace not working
      ... Error message: ... Where do you visit RWW, from Internet or LAN? ... Do you have hardware router or firewall between Internet and SBS server? ... Collect IIS Log: ...
      (microsoft.public.windows.server.sbs)
    • Re: Collection of email
      ... Yes Peter you are right IIS is a product I have never used before therfore I ... The server runs a permenant online connection through a ISDN channel 64K. ... Just as a subnote VPOP3 is installed on the server with the Internet and IIS ...
      (microsoft.public.inetserver.iis.smtp_nntp)
    • Re: companyweb
      ... After comparing the IIS metabase from your machine and my test computer, ... Check the settings of the virtual directory companyweb. ... Uncheck Bypass Proxy server for local address. ... and go through the Internet option. ...
      (microsoft.public.windows.server.sbs)