CAA: Christian Anime Alliance

Hello. I am new to maintaining a server and im pretty confused. I know that I need to have major security added, but I don't see the full picture. does anyone know some good links to Starting up a server, Basics? I'll be transfering through HTTP and FTP. thank you. (using windows server 2003)

Old Phil

Wait... You want to secure Windows Server 2003 so you can do FTP to it? Is this for your -OWN- use, or is it actually going to be on the 'net. If the later, you're going to get hacked. (Sorry, but it's a question of when - not if in my experiance). Is this a project for work (I'm guession 'no' based on your age, but I was doing freelance stuff at that age so, *shrugs.* ) What experiance do you have with computers? What are you going to use it for? What http server will you use? Have you thought about sftp (like putty's version, for example? )

oldphilosopher wrote:Wait... You want to secure Windows Server 2003 so you can do FTP to it? Is this for your -OWN- use, or is it actually going to be on the 'net. If the later, you're going to get hacked. (Sorry, but it's a question of when - not if in my experiance). Is this a project for work (I'm guession 'no' based on your age, but I was doing freelance stuff at that age so, *shrugs.* ) What experiance do you have with computers? What are you going to use it for? What http server will you use? Have you thought about sftp (like putty's version, for example? )

I'm planning to use no-ip.com. (windows xp pro) its going to be on the net. But most of the sections would be password protected (dont know if that will help any) just some freelance stuff. i'm currently taking Cisco CCNA1. i'm using it for hosting amvs. sftp?

If you're doing it for download, why do you want ftp and not http?

SFTP:
RT*N (Read the manual).
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
As long as you're in US or UK, you should be alright. I think putty is one of the better SFTP programs out there; YMMV.

I cannot help you secure a WinXP box that is live to the internet. I've seen to many of them zombied to think I was that clever. Perhaps a different approach is in order. What are you trying to accomplish? Do you *need* an HTTP or FTP server? If we knew more about what you wanted to do, it might help... If all you are going to do is server web pages, do you really need an FTP server? Are you going to allow other people to put stuff on it? If so, maybe read up on SFTP and setup a deamon for that.

For security (such as it is on windows boxes) here's my thinking:

1. Go buy a linksys EtherFast cable/dsl firewall router ( BEFSX41 should be fine).
2. Hook THAT up to your high speed line.
3. Setup YOUR machine as a webserver on (say) IP 192.168.1.1 and tell the firewall to forward traffic on "port 80" to that IP.

This will secure (some of) the GAPING holes in Windows... That firewall can even be setup to talk to a DDNS server, so you will probably not have to punch any more holes thru it then than.

Though as I said before, YMMV.