Have a Webserver Set up for internal use no Internet

[sysadmin123]

Ok I have a win 2000 server that I have IIS running on and also installed PHP and MYSQL.

I use it to run 3 items.

1. Our Company Intranet
2. A PHPBB Forum I use as a KnowledgeBase
3. A custom designed program I wrote in PHP and MYSQL for internal use only.

All this is behind a firewall and is only accessed by myself. But since it's connected the netwrok right now I can log on to that server and access the internet.

Am I secure right now? If not how do I disable the access to the internet without making it where other systems can't browse to this server internally.

I don't have the latest releases of PHP Etc as they broke the program I wrote but I figured since it's not available on the web it shouldn't be a big deal.

Right?

 

[porkchopexpress]

If your firewall is preventing anyone on the internet from connecting then you are fine unless your firewall is compromised. The only danger is that a worm that exploits a PHP vuln could get onto your LAN but this is unlikely and upto date AV should protect you.

Having said all that you would be better off on the latest version so i would look into why your apps break and fix that.