Re: How Should IIS permissions be set to prevent hacking?

From: StarView (StarView_at_discussions.microsoft.com)
Date: 07/06/04


Date: Mon, 5 Jul 2004 15:03:01 -0700

Hi Karl,

Thank you for your reply. My purpose of my web server is to allow home automation, streaming video, and share pics with friends. So I don't expect more than a couple of concurrent sessions. My ISP gasped when I told them I am using IIS. The tech recommends using Apache. But I'm afraid to load it on my WinXP pro machine as I don't know how it may affect my machine.

Thanks, John

"Karl Levinson [x y] mvp" wrote:

>
> Here's an important start:
>
> www.microsoft.com/technet/security
> [look for sections on Windows and IIS]
> http://securityadmin.info/faq.asp#harden
> http://securityadmin.info/faq.asp#ftpfolder
>
> Note that Win XP and any other Windows workstations are not good web
> servers. There is a limit of 10 max concurrent connections, which equals
> about two concurrent visitors to your web site max. The only fix is to
> upgrade to a server version of Windows, or run Apache on Linux.
>
>
> "StarView" <StarView@discussions.microsoft.com> wrote in message
> news:053E1007-F7AF-4DB2-B3E1-28D5F21A3688@microsoft.com...
> > I friend today demonstrated how he was able to modify my default page. He
> suggested coming here. What/where/how do I need to configure the
> permissions in my IIS (in WinXP Pro) such that I can update my pages (using
> FP), and allow Internet users to read the pages, yet prevent anyone from
> changing them or adding malicous code?
>
>
>



Relevant Pages

  • Directory Server
    ... There is a very small number of Windows workstations and servers, maybe 25-30 total, and about 40 Linux/Solaris workstations and servers. ... I have been considering Fedora Directory Server with a Samba server acting as a PDC for the Windows systems authenticating back to FDS via LDAP. ...
    (RedHat)
  • Re: FreeBSD performance bottleneck solved by linux (developers?)
    ... > I have a cluster of twelve servers doing usenet news proxying. ... > Each proxy handles around 500 concurrent connections from my ... You should post to one of the support mailing lists ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Its MS Patch time again (8 Highly Critical Patches, Linux anyone?)
    ... >> I run hundreds of Windows workstations and servers, ... How you can fulfill your users desires without breeching the security ...
    (alt.computer.security)
  • New to NAS, have idea, looking for software to do it.
    ... Typically they have less than 100 Windows workstations and ... Some servers are virtual hosts - just ... of free disk space on the local disk drives. ... thought of this and developed software to do that. ...
    (comp.arch.storage)
  • Re: Logwatch Unmatched Entries
    ... for my NAT'd school network. ... forwards to my two Bind servers. ... Zone update refused from my windows workstations. ... windows machines by default try to register their internet connection in ...
    (comp.protocols.dns.bind)

Quantcast