[CrazyKillerMan]

Heya clutch

I was wondering if you could point me in the direction for a good IIS setup (web page or a forum). I am throwing it on my LAN for exp, but I would really like to read about it before I do. I've done some google searches, and came up with some modest stuff to say the least.

I wanna get it "locked down" and what not before I go galavanting around in IIS so i dont spred stuff around.

[clutch]

NP bud, there are several ways you can do it and they are pretty easy. What are you looking to host? Static pages? ASP? WWW and FTP? What's your poison? I will try to narrow down the info I send you so you don't get saturated.

[CrazyKillerMan]

Sweet...I owe you for this one...

Quote:

What are you looking to host?

Well...I have FTP server atthe moment, but i wouldnt mind trying out M$ ftp server. Mainly though I am looking for WWW. ASP would also be nice, but I only have exp with php and sql (no mssql, but thats another story). Basiclly I wanna just host a web page that I am working on.


thnx alot

[clutch]

This is a general link that will eventually lead to the ones below, but may have stuff on it that you find of interest:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/iis/Default.asp

Here's one that has a few sources on setting up IIS 5 (and why it's better than IIS 4):

http://www.microsoft.com/technet/treevie...is/tnq20005.asp

It has a nifty presentation on it, and will give you an overview of what to expect.

OK, for securing IIS, start with this one:

http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/prodtechnol/iis/tips/iis5chk.asp

It will introduce you to some of the more basic concepts and shows you some of the tool (like the hisecweb template) that can be used to secure IIS. I like URLScan myself, and live by it on all my IIS boxes. This is included in the new security toolkit from MS (found here) and really kicks a$$. If you need help with it, let me know. I have a specific file that I use to allow Exchange 5.5 OWA interaction, but locks down everything else.

Now, for other stuff in IIS (and some nifty FTP tweaks), check out:

www.iisanswers.com

Get on his mailing list, and you will get heads up on impending disasters as he is in pretty close with the IIS team. Also, because of an email that he sent out, I will be beta testing the new .Net servers pretty soon. I just love toys...

HTH

[CrazyKillerMan]

thnx clutch

Ill go through these tonite after I am sick of studying (tuesday is my first outta 7 finals).

[CrazyKillerMan]

Ok clutch, seems everything is installed and hot fixes have been applied, or so the nshc32 tool tells me.

Quote:

I like URLScan myself, and live by it on all my IIS boxes.

I dl'd it and ran the ASP Dynamic template and what not, but I am still unsure to what exactly it does. Something about filtering through a set of rules???

But, the links were VERY helpful especially under securing, Disable IP Address in Content-Location.

[CrazyKillerMan]

i spose i should send the link too
lol

http://project-x.dynu.com

Hopefully we will work on it over xmas, but it should come together in a few months!