Newbie needs security help with Win2000

#1 Nicholas Brown

stranger

Group: Members
Posts: 8
Joined: 20-April 01

Posted 20 April 2001 - 12:32 PM

Hi All

I have been running Windows2000 on my pc for a few days now - its great, I love it, but I need some help making it more secure.

The PC will be getting left connected to the internet most of the day, running a Telnet server (TelnetXQ) and an FTP Server (Serv-U).

I have ZoneAlarm running too. Ive heard you talking about "tweaking" it and if anyone can give me any guides, tips, advice on how to make it any more secure - it would be greatly appreciated.

Thanks,
Nicholas Brown

#2 felix

addict

Group: Members
Posts: 691
Joined: 28-October 99

Posted 20 April 2001 - 06:14 PM

As far as security, it would be better for you to use the built-in telnet daemon and IIS for your ftp site.

Both are free with Win2k and work off your existing user accounts.

#3 Nicholas Brown

stranger

Group: Members
Posts: 8
Joined: 20-April 01

Posted 20 April 2001 - 06:28 PM

Sorry - I hate IIS. Its slow, sluggish and need I say more?
I am using Apache as well, I just dont see IIS as an option.

I have also heard there is a big hole in the MS Telnet server - concerning DoS attacks...

Also, TelnetXQ works from the user accounts within 2000

#4 Guest__*

Group: Guests

Posted 20 April 2001 - 10:42 PM

If you are running an FTP like Serv-U then Windows 2000 security wont do squat. All security for the FTP is set up through Serv-U.

If you want a very secure FTP, but with less options, use IIS.. btw... i don't know why you say it's slow.... cuz it's lightning fast for me. IIS will use system privelages on the files you share on your ftp. So whenever you want to add a user to your ftp, you have to add it to the local system user accounts, (or domain accounts if thats the case), then set the appropriate privelages on the files shared.

#5 Nicholas Brown

stranger

Group: Members
Posts: 8
Joined: 20-April 01

Posted 20 April 2001 - 10:55 PM

is it possible just to install the FTP server of IIS?
The reason I say its slow is because as a web server - it is. Apache beats the pants off it

#6 clutch

Carpal Tunnel

Group: Moderators
Posts: 3859
Joined: 29-March 00

Posted 20 April 2001 - 11:18 PM

Weird, I haven't had any speed issues with it. But in any case, you can just disable the webs using the IIS MMC from a client PC or on the server itself while retaining the FTP server and vice versa.

#7 BladeRunner

veteran

Group: Members
Posts: 1208
Joined: 27-March 00

Posted 21 April 2001 - 01:20 AM

Must admit the more we use IIS the more we are liking it.
We used to run both our Intranet and Web Server on LINUX boxes, however now we have an AD domain we decided to give IIS a go.
The Intranet box has now got 6 weeks of up-time, something you'd never have been able to do under NT4.
Loving it, might have to take a look at the IIS built into XP server aswell.