Win 2000 AVD WebServer

[HDRick]

I'm seting up a win2000 avd server for email webpage and other voice over ip programs That my business does demo of . I had a lixux server running but it has come to where most of the program run on NT not on linux.I have been trying to find out how to close port 443 we won't be useing SSL I know it can be done at the router but using the server for demos there are to many ports have to be used to open just the ports we need .Mainly this all about securing the server I had read that if you keep up with the service pack and patches it should ok.

 

[Woodie]

let's see: You "close ports" on the firewall, not on the server. On the server you disable services, and make sure that any services that are not *absolutely necessary* are turned off, and deinstalled if possible.

Since the firewall can control 65,000+ ports, I don't see why you can't start with a deny all statement, and then add in all the ports needed for your application. Besides, many people who are accessing your server from corporate networks may not have the ability to use all the ports that you want to.

There was a recent link on securing IIS...go to www.sans.org, and see their page on securing and locking down IIS.

--Woodie

 

[HDRick]

I understand about the disable services and the firewall but I been looking where do you disable the SSL services I been running linux servers and I would turn off telnet another services I don't want open.This is my first win2000 server i have ever setup and most of the people I know don't use win2000 servers they use linux only.

 

[Woodie]

SSL isn't a service: it's a way to encrypt an HTTP session. If you don't configure any sites to require SSL, then there shouldn't be any services listening on port 443.

If you did have a restricted page/site, then the IIS server process would listen for requests on port 443 as well as port 80.

--Woodie