Re: is IIS 5.0 safe?

From: David Neff (neffda77_at_hotmail.com)
Date: 04/02/04 

Date: Fri, 2 Apr 2004 00:13:35 -0500

If I stop the website using the IIS snap in when I'm not testing whatever
I've developed, does that eliminate any risk?

PS- Thanks for all of your other advice. I really appreciate it.

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:erFl8D8FEHA.3880@TK2MSFTNGP10.phx.gbl...
> Several options.
>
> IIS 5.1 comes with XP Pro and only supports one website and 10
connections.
> 1. It is possible to set up IP Restriction on the website such that it
will
> only process localhost/127.0.0.1 requests (I don't remember if this
feature
> is enabled in the UI or not).
> 2. You can also setup the Microsoft Loopback Adapter and configure the
> website to only listen on that network interface, so it then becomes
> impossible for IIS to even respond to non local requests while your own PC
> is perfectly able to access IIS.
> 3. Run the software firewall and make sure that port 80 is not open.
>
> Finally, realize that when you run server software, you become responsible
> for configuring/securing it. Security is best achieved through knowledge
> and configuration.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "David Neff" <neffda77@hotmail.com> wrote in message
> news:%23pe%23Kj6FEHA.2404@TK2MSFTNGP11.phx.gbl...
> At work I use IIS to develop .Net applications and wanted to install it on
> my home Windows XP Pro machine to do some work from home. I'm concerned
> that I'm potentially opening up my home pc to who know what kinds of
> attacks. I have a software firewall, but I don't trust that it is enough.
> Is there a way to configure IIS to make it only work on the machine its
> installed on in a localhost type mode or something. I basically want to
cut
> it off from the outside world.
>
> Thanks!
>
>
>

Relevant Pages

  • Re: Virtual Server 2005 R2 SP1 will not install
    ... I have noticed that the Website Port box on the Configure Components page is ... I was trying to find the latest version of IIS ... The OS I am trying to install Virtual Server 2005 on is Windows ...
    (microsoft.public.windows.server.general)
  • Re: ConnectComputer Page Cannot Be Found
    ... but things like connectcomputer, OWA, RWW, some parts of the console, among other things, are under the default website and can't function if it's stopped. ... IIS default website which is on port 80/443. ... always install and work if you just take the default> next approach. ...
    (microsoft.public.windows.server.sbs)
  • Re: Securing IIS6
    ... physical dir of the default website. ... I am talking about the physical location of the IIS files (i.e. ... >> IIS itself cannot be installed on a different partition than the OS. ... >>> documentation on how to install IIS to a different partition? ...
    (microsoft.public.inetserver.iis.security)
  • Re: ConnectComputer Page Cannot Be Found
    ... I installed Trend using their instructions. ... you also mentioned that the default website does lots of important ... IIS default website which is on port 80/443. ... always install and work if you just take the default> next approach. ...
    (microsoft.public.windows.server.sbs)
  • Re: Permission Problems SBS2003 R1
    ... website on the SBS server? ... Default permissions and user rights for IIS 6.0 ... Step 3: Please check the permissions in IIS manager: ... Step 4: Re-running CEICW on SBS server: ...
    (microsoft.public.windows.server.sbs)
Loading