Re: Problems setting up a web server with Win XP and IIS 5.1...???

tw55447 <tw55447@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Lanwench,

"This sort of thing does make me a bit nervous from a security
standpoint. I'd hope this isn't the same box you use as a
workstation..."

No, this is a separate computer that I set aside just for this
purpose.

Good - but I'd still be wary. Hosting a public website on your LAN (even if
it isn't on your usual machine) can be risky.




"When you do get this up and running, go to www.dyndns.com or
similar, and set up a dynamic DNS service - and download the update
client to run as a service on this PC (or use your Linksys, which may
have an update client built in). Then you'll be able to use
http://myhostname.dynamicdnscompany.com and not worry about IP address
changes. But that's not relevant yet, of course."

I went ahead and set up an account with them as well as downloading
their automatic IP updater software. I also noticed that my router
DOES have an option to choose DynDNS in it's settings. Do you think
that this might cause a conflict...having the router as well as
DynDNS's software set to update the ip?

Yes. Pick one. I personally find the software/service more reliable (and
Dyndns said they thought it was too) but whichever works for you. Just not
both.



"But is it an exception for * or only the local subnet?"

When I "configured" the firewall, under the exceptions tab, I clicked
"Add Port" then entered the name of the exception then the port
number (80). That was all I did. I didn't mess with anything under
the "Change Scope" option. So my setting would be the default. Does
it need to be set to "Any computer...", "My network...", or
"Custom..."?

Any computer, if you want people to be able to connect to it over the
Internet.

I suppose that if the setting were set to custom, I
would enter the local IP of my server (192.168.1.20)?

No, you'd configure it for * - meaning, everything.




"Can you successfully telnet to your public IP address on port 80,
from outside?"

I haven't tried this, I'm not too sure what to do. I'll try looking
it up and see if I can get it to work.



"What about testing http://lanIP from another computer on your LAN,
just to make sure you can access it from something other than the box
itself? That's the interim thing I'd try...."

Yes, this works just fine. I can connect to anything I want as long
as I'm behind the router.

Good. So you're close.



"Unless you'd opened up inbound ICMP, that doesn't mean much."

So the only way that you are going to get a ping response from your
server is if you "allow" it to be ping'ed?

Yes.

I didn't set anything
like that up, so I assume that me getting a "time out" error is
normal?

Yes.

I'm guessing that is set in the firewall...thus the reason
why I couldn't ping my server when the firewall was up and could when
it was down?

Yes.



"Ouch - don't connect without a firewall, even for a nanosecond. Put
your router back in place asap."

I did this to see if it was my firewall blocking it. It didn't solve
the problem, so I turned it right back on.

Good - but seriously, it takes only nanoseconds for bad things to happen.



"The telnet would be a useful test....as would knowing whether you can
access the site from another machine on the same network."

I'll try to telnet to it and see what happens. If the telnet fails,
what might be causing that?

Most likely your firewall or router settings.


Thanks for the response,
Thomas

No prob -


.

Relevant Pages

  • Re: loss of SOME connectivity
    ... I "think" it is DNS. ... Yes, I can ping the router, AND the ISP DNS. ... I cannot connect the inet cable directly to the server because the inet is ... MS firewall not started. ...
    (microsoft.public.windows.server.sbs)
  • Re: IP Addressing
    ... Address of the ISA server? ... firewall and router). ... On the firewall create a static NAT entry as I wrote ...
    (comp.dcom.sys.cisco)
  • Re: Still cant connect to RWW or OWA remotely
    ... Re-running the CEICW, disabling the firewall, then re-running CEICW again, ... "Cannot find server or DNS Error". ... the DSL router 4-port switch. ... of the two NICs by clicking the Advanced tabs, ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN suggestions requested
    ... > connecting to the Internet through a cheap basic broadband router. ... necessarily mean you have to pop in a firewall, ... also mean only to secure the W2K server. ...
    (comp.security.firewalls)
  • DLink 704 hangs, so I need something better
    ... I recently purchased a DLink 704 firewall/router to hold the static IP ... It works well as a standalone firewall, ... Every consumer-level router in the world has this feature. ... Can Windows 2000 Server perform the same type ...
    (comp.security.firewalls)
Loading