Re: Hosting Public www on SBS

Tech-Archive recommends: Fix windows errors by optimizing your registry



When I say host your public www on SBS,I mean you will get the Welcome to
Windows Small Business Server 2003

If you guys don't recommend opening port 80, then why do Microsoft ?


"Les Connor [SBS MVP]" <les.connor@xxxxxxxxxxxx> wrote in message
news:173977EC-8E49-4E48-B972-B5886651BCD8@xxxxxxxxxxxxxxxx
With regards to the port 80 question and RWW - when you attempt a
connection to /exchange (OWA) or /remote (RWW) via http, SBS automatically
re-directs the connection to port 443 (https, SSL).

If port 80 is open but nothing is listening (i.e. no web site) on that
port, then the risk Dave and others refer to isn't there. Only the
redirector is listening, and only for /exchange and /remote. In this case,
port 80 is only used so your users can enter http instead of https when
connecting. If port 80 is in fact closed, then users will need to remember
to use https in the url instead - not the end of the world.

--
Les Connor [SBS MVP]
"Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:uFGp1FvHHHA.4688@xxxxxxxxxxxxxxxxxxxxxxx
There are a wide variety of reasons why it's generally not considered a
good practice to allow public access to your SBS. For one thing, it's
the domain controller for your company's network, so an intrusion could
be expected to have major consequences. Generally, SBS-sized companies
probably don't have the type of security expertise one would want for
hosting a web server. Also, customers expect 100% up time for web sites,
which may be more difficult in an SBS domain where you have reboots,
possible Internet connection downtime, power failure, etc.

You can host a web site at a commercial hosting company for a very small
amount of money. They'll have excellent uptime, your customers won't be
competing with your users for bandwidth, and IMO most importantly, the
only data at risk is that which applies to the web site. With a site
hosted on the SBS, you're risking not only the site data, but also your
employee and customer data, documents, banking and other financial
information, or whatever other data is found on your network.


"Mark Gibbons" <noone@xxxxxxx> wrote in message
news:uO03y2uHHHA.1252@xxxxxxxxxxxxxxxxxxxxxxx
"I _strongly_ encourage you _NOT_ to host your public www on SBS." This
comment has been made to me before and I don't understand. I have
followed the SBS guide and opened the ports necessary. Won't closing
port 80 stop RWW. I do have strong passwords.







.



Relevant Pages

  • Re: companyweb from RWW
    ... Les Connor [SBS Community Member - SBS MVP] ... "Could not open connection to the host, on port 23: ... internet should tell the tale, ... This site is the default web site. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW with no https
    ... Speaking about MS IIS as a web server, in HTTP, one can run multiple ... "host headers" and run all sites on the default port 80. ... to workstations, runs on port 4125, which is dynamically opened by the SBS ... HTTP why cant you do the same with HTTPS? ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW with no https
    ... A report from dnsstuff.com indicates that you have Kerio Mail Server. ... I can not use https. ... I am not running SBS 2008, ... port but going to port 8080. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Web Workplace
    ... > certificate to this web site. ... Click to select the certificate issued to your SBS server and then ... Type 444 as the SSL port. ...
    (microsoft.public.windows.server.sbs)
  • Re: companyweb from RWW
    ... "Could not open connection to the host, on port 23: ... internet should tell the tale, ... Les Connor [SBS Community Member - SBS MVP] ... This site is the default web site. ...
    (microsoft.public.windows.server.sbs)