Re: Windows Server 2003 Web edition.

From: Chris Comley (ccomley_at_gmail.com)
Date: 08/27/04 

Date: Fri, 27 Aug 2004 18:52:38 +0100

Well, I have to say, Microsoft may say that WS2003Web is "safe" out on
its own but with their history of loopholes, leaks and hacks, I have
*ours* firmly stashed behind a Sonicwall Soho 5-user firewall
appliance. I would NOT subsitute a "software" firewall running on the
server itself for this either.

The Sonic has a VPN to our main office, so we can have full "windows"
access to the server. The Sonic also permits port 80 access and port
21/22 so we can publish websites on it and so oru customers can upload
their web content. And that's it. It has the default "anything
outwards" permit rule but sometimes I wonder if I should turn that off
and enable only stuff I know I need. Paranoid? Perhaps.

Note that this won't stop "worm" attacks to which IIS6 may turn out to
be vulberable to on port 80, coz of course port 80 is open...

Louise Dude <ldude32@hotmail.com> wrote:

>Hi,
>We've got a dedicated server with an ISP, running Windows Server 2003 (Web
>Edition), running a public website.
>
>We'd like to protect that server from attacks, and thought of installing a
>software-based firewall & antivirus.
>
>I've been through countless sites/news groups (through Google) but cannot
>find an absolute answer to our needs.
>
>What would you recommend for such a use? - It seems most "server" oriented
>firewall software is trying to protect a network - we just want to protect
>the server.
>
>Any help/ideas/thoughts would greatly be appreciated,
>
>Thanks in advance,
>
>Louise. 

---
Wizards Ltd www.wizards.co.uk
UK supplier of Sonicwall, Watchguard, Zywall.

Relevant Pages

  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Activesync / Airsync - Alternative Ports
    ... Setup a reverse HTTP proxy. ... Another idea is to use the PPTP capabilities of a Windows Server to allow ... Satellite - Cisco Firewall - Exchange Server ... So on the server side you would configure the port 80 to redirect to ...
    (microsoft.public.pocketpc.activesync)
  • Re: Routers Firewall
    ... > indicates that it has firewall technology, then the router doesn't have a ... What your router does have is NAT. ... ZA is a fine product which will protect a computer ... Port 80 is the WEB access port and port 21 is the FTP ...
    (comp.security.firewalls)