Server Security

[kev05]

Hi,

I am hosting my website on a dedicated server running IIS on a Windows 2003 Server box. I am very concerned about my server security as I am not using any firewall or other security programs or hardware. My Web server is directly connected on the Internet and is being accessed by hundreds of my site members.

I have scanned ports on my server and most of the ports are closed. I would like to have them blocked instead so that scanners are not able to probe my ports.

I am very concerned about the security of my server and would like some guidelines in which I can quickly secure my server.

Thanks so much in advance,
kev

 

[aftertaf]

activate the firewall and allow ONLY port 80 traffic.

quick and effective, believe me!

Aftertaf

"Solutions are not the answer." - Richard Nixon

 

[bofhrevenge2]

As aftertaf says at the very least activate the software firewall, but much better buy a cheap hardware firewall they are dirt cheap these days.

 

[kev05]

I am hosting my server at a web hosting company, so I am not too sure whether I can install a harware firewall. How can I only allow port 80 from windows 2003 server? Does Windows 2003 server has any kind of firewall that I could use?

Thanks so much in advance
kev

 

[bofhrevenge2]

Take a look here.

http://www.microsoft.com/resources/...proddocs/en-us/hnw_understanding_firewall.asp

"Horsey to king bish three

 

[bofhrevenge2]

http://www.microsoft.com/resources/...andard/proddocs/en-us/hnw_enable_firewall.asp

"Horsey to king bish three

 

[kev05]

Hi,

As I am using Windows 2003 server Web edition, Internet Connection Sharing, Internet Connection Firewall, and Network Bridge are not present. :-(

Any other ideas?

Thanks again,
kev

 

[bofhrevenge2]

Is there no ICF in web addition? I didn't realise that.

You could try zone alarm, or ask your ISP if they are providing a firewall service.

or

http://www.microsoft.com/resources/.../standard/proddocs/en-us/wsa_hmws_pfabout.asp

"Horsey to king bish three

 

[kev05]

In addition to zone alarm, are there any other quick things that can help securing my server? How about having an IDS?

 

[technome]

Your much better off with a cheap firewall router then involving firewall software on a server, less headaches. Set it and forget it, no updates, no strange interactions.

 

[bofhrevenge2]

kev05 have you contacted your web hosting company? They really should be providing this service anyway.

"Horsey to king bish three

 

[kev05]

Hi,

I have contacted my web hosting company but they are not quite helpful. I might have to changed web hosting company as they are not helpful at all when it comes to securing my server.

Is it worth having an IDS running on the server?
Also, I would like to monitor my CPU performance, and get stats..such as graphs..any ideas how to do that?

Thanks so much
kev

 

[bofhrevenge2]

If they provide you with a remote desktop to manage your server then you can use the Windows tools to monitor your server.

http://www.windowsnetworking.com/articles_tutorials/Windows_2003_Performance_Monitor.html

To be honest if your web host won't even answer a simple question like that i'd tell them to get stuffed and move hosts.

"Horsey to king bish three

 

[kev05]

Thanks for the info,
Yep, I will probably be looking at another hosting provider that offer server security,
thanks again