I saw there are some sites when you enter ex: mydomain.com it
redirects to www.mydomain.com. I know I can write an ASP (or
scriping) to redirect the site to full name as www.mydomain.com, but
is there any other elegant way of doing this in IIS so for every site
that I install I don't need to dump a small script to do the work?

Also, I am having problems with blocking all my ports to prevent
attack. I have windows 2000 just running of covad's dsl T1 and the
router is just directly connect to my win 2000 server without any
firewall protection.. How do I filter all ports and turn them off. I
always hear turn them off first but turn on the one that I need.
Since I have SSL, SMTP, WWW services, so I assume I need to leave port
80, 21, 25, 443 on for these services.. but what about others?

I am afraid to turn them all off becuase that might make some services
not running at all if they designed to be run on certain port..

Is there a software or some advises that I can grasp for me to easily
filter down and make my server to stand still with minimum
configurations? If not.. how do I turn certain ports off if they
aren't necessary. Pleae advise, thanks.

Re: redirecting from mydomain.com to www.mydomain.com by Jonathan

Jonathan
Sun Feb 22 12:09:23 CST 2004

Hi,

The easiest way to do this is with some sort of file that redirects, but it
doesn't need to be ASP. Create an HTML file, index.html, in your
"mydomain.com" website's root folder. In the file, put these contents:
<html>

<head>
<meta http-equiv="refresh" content="0; URL=http://www.mydomain.com">
<title></title>
</head></html>

In the IIS manager, make that the default site for "mydomain.com" and also
make it the 404 site, so any/all requests will go to www.mydomain.com/
--
--Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.


"Kelvin" <ebug@hotmail.com> wrote in message
news:191e0546.0402220252.1462f6ee@posting.google.com...
> I saw there are some sites when you enter ex: mydomain.com it
> redirects to www.mydomain.com. I know I can write an ASP (or
> scriping) to redirect the site to full name as www.mydomain.com, but
> is there any other elegant way of doing this in IIS so for every site
> that I install I don't need to dump a small script to do the work?
>
> Also, I am having problems with blocking all my ports to prevent
> attack. I have windows 2000 just running of covad's dsl T1 and the
> router is just directly connect to my win 2000 server without any
> firewall protection.. How do I filter all ports and turn them off. I
> always hear turn them off first but turn on the one that I need.
> Since I have SSL, SMTP, WWW services, so I assume I need to leave port
> 80, 21, 25, 443 on for these services.. but what about others?
>
> I am afraid to turn them all off becuase that might make some services
> not running at all if they designed to be run on certain port..
>
> Is there a software or some advises that I can grasp for me to easily
> filter down and make my server to stand still with minimum
> configurations? If not.. how do I turn certain ports off if they
> aren't necessary. Pleae advise, thanks.



Re: redirecting from mydomain.com to www.mydomain.com by Kristofer

Kristofer
Sun Feb 22 13:29:36 CST 2004

Hello,

You can do this in IIS if you would like to.

In IIS Manager, right click the website you want to redirect and click
Properties.
Click on the "Home Directory" tab, and select "A redirection of URL".

You should close down all ports you do not use. If you do not know if a port
is in use, close it, because obviously you do not have control of it, and it
can therefore be used by an attacker.

Sounds like you need 80 (HTTP), 443 (SSL) open.
Do you need 21 (FTP)? If so, make sure that you use authentication, or else
you will very fast have a hdd with alot of unwanted files.
Do you need 25 (SMTP) open? Are you accepting emails? For a webserver, only
sending emails (for a form for example), you do not need this port open.


--
Regards,
Kristofer Gafvert - IIS MVP
Reply to newsgroup only. Remove NEWS if you must reply by email, but please
do not.
www.ilopia.com - FAQ and Tutorials for Windows Server 2003


"Kelvin" <ebug@hotmail.com> wrote in message
news:191e0546.0402220252.1462f6ee@posting.google.com...
> I saw there are some sites when you enter ex: mydomain.com it
> redirects to www.mydomain.com. I know I can write an ASP (or
> scriping) to redirect the site to full name as www.mydomain.com, but
> is there any other elegant way of doing this in IIS so for every site
> that I install I don't need to dump a small script to do the work?
>
> Also, I am having problems with blocking all my ports to prevent
> attack. I have windows 2000 just running of covad's dsl T1 and the
> router is just directly connect to my win 2000 server without any
> firewall protection.. How do I filter all ports and turn them off. I
> always hear turn them off first but turn on the one that I need.
> Since I have SSL, SMTP, WWW services, so I assume I need to leave port
> 80, 21, 25, 443 on for these services.. but what about others?
>
> I am afraid to turn them all off becuase that might make some services
> not running at all if they designed to be run on certain port..
>
> Is there a software or some advises that I can grasp for me to easily
> filter down and make my server to stand still with minimum
> configurations? If not.. how do I turn certain ports off if they
> aren't necessary. Pleae advise, thanks.