How secure is Windows 2000 port filtering?

[surfgatinho]

Is the standard Win2K port filtering secure enough to use a public IP address and have it running a VPN and web server with no firewall??

Thanks Chris

 

[yizhar]

No.

Use a firewall.

You should also use some application layer filters and hardening both the OS and applications.
See some tips here:

http://www.microsoft.com/technet/security/chklist/iis5cl.asp

And you can use tools such as IISLOCKDOWN, URLSCAN, etc...



Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar