"Ross M. Greenberg" <> wrote in message
news:yZjfi.1052$...
>
>> My pointer would be to learn how to harden IIS7, Vista including its
>> registry, file system, user accounts and the Web applications to attack,
>> facing the Internet. Otherwise, the machine is just hack bait.
>>
>> Do you even know what a CSS attack and many other forms of attacks and
>> hacks are about?
>
> Thanks for the pointer, and yes, I have pretty good idea what these
> attacks and hacks are all about. Fortunately, I'll be running in the
> Vista Web server on a spare machine.
>>
>> http://www.google.com/search?hl=en&q...ck&btnG=Search
>>
>> Just like I would not put a Web solution out facing the Internet using XP
>> pro, I wouldn't do it with a workstation version of Vista either.
>>
>> You need to be coming with Win 2k3 server a Web solution server O/S
>> that's harden, along with IIS and Web solutions that are harden.
>>
>>
>
> I'm not familiar enough with IIS to know where it's soft and where to
> harden it. I I'm just trying to figure out how to expose my IIS7 server
> to the outside world/Internet.
>
What are you talking about? If the machine is behind a firewall then you
expose port 80 TCP for HTTP and 20/21 for FTP and the Web server is wide
open to the Internet, along with the O/S.
Do you understand that if you have not taken measures to harden the MS NT
based O/S such a Vista that's hosting a Web server and is being exposed to
the Internet, then it's just hack bait. There are entire books and articles
that cover this kind of stuff, including IIS.
So you may not be concerned with it, because you're running it on a spare
machine. In the meantime, the machine is compromised and being remote
controlled and is being used to attack networks or other Web servers on the
Internet.
Man, seasoned O/S and Web server professional administrators can barely
protect the stuff on the Windows platform, and some can't do it period or
are ignorant.