Win2K Server : How to lock down when connnected to internet

[BrandonFFR]

I have a a problem. I have a Win2K Server colocated at a hosting company. They provide no basic level of protection...no firewall on thier colocation network and no VPN to manage your box. You box sits there naked and bare on the internet.

I just keep keep up with the semmingly hourly patches that MS releases to block the W32 worm/trojan of the day....

My box has contracted several worms trhat cause the box to chatter....and te hosting company is more than happy to bill me for the badwidth used....sucks!!

So..before I go and have my servers removed from thier facility..I'd like to try blocking all "dangerous" ports. I'm just not sure which ones I shoudl block....

My box needs to do this:
Serve Web pages
server audio streams via Windows Media Server
SMTP
I'll also need to manage the box through a Terminal Serives session

I'm a little nervous to just start blocking ports...so maybe someone out there has some advice......

 

[GlenJohnson]

This is a list of definitions.

http://www.iss.net/security_center/advice/Exploits/Ports/default.htm

Glen A. Johnson
Johnson Computer Consulting

http://www.johnsoncomputers.us

"I only know that I know nothing."
Socrates (47-399 BC); Greek philosopher

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884