Web Pages

I am having an awful time trying to get SBS2000 to accept
a webpage from an outside user and to run extension of
any variety. Could someone point me to explicit
instructions to create a new website (in addition to the
default site already on the system), add the extensions
to it (preferably 2002), and set up access for an off
site web developer to upload web pages to it. I have
used work arounds to load pages locally up to this point,
but have never had the extensions work properly from any
computer off site. I must be doing something basic
wrong, but i can't see it.

Thanks,
Bill

Mark
Mon Oct 06 18:58:15 CDT 2003

are you REALLY sure you want to host your own site on your sole server???
It really isn't advised.

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Bill" <bwebb@microdev.net> wrote in message
news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
> I am having an awful time trying to get SBS2000 to accept
> a webpage from an outside user and to run extension of
> any variety. Could someone point me to explicit
> instructions to create a new website (in addition to the
> default site already on the system), add the extensions
> to it (preferably 2002), and set up access for an off
> site web developer to upload web pages to it. I have
> used work arounds to load pages locally up to this point,
> but have never had the extensions work properly from any
> computer off site. I must be doing something basic
> wrong, but i can't see it.
>
> Thanks,
> Bill

Scott
Mon Oct 06 20:10:35 CDT 2003

Mark,

I see this post a lot. I am curious as to why. If you
are not running a major E-commerce site and only need a
web site for a few people in the outside world to access,
what is the harm? I've been thinking about doing the same
thing but am a little nervous after seeing all the "Don't
do it"'s here. What if a person had a second W2K server
and had all the access go through the SBS into that
server? Still a bad idea?

Thanks!

Scott Cady

>-----Original Message-----
>are you REALLY sure you want to host your own site on
your sole server???
>It really isn't advised.
>
>--
>Sincerely,
>Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
4&2000
>www.MCSE2000.com
>www.AppLauncher.com
>
>
>
>"Bill" <bwebb@microdev.net> wrote in message
>news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
>> I am having an awful time trying to get SBS2000 to
accept
>> a webpage from an outside user and to run extension of
>> any variety. Could someone point me to explicit
>> instructions to create a new website (in addition to the
>> default site already on the system), add the extensions
>> to it (preferably 2002), and set up access for an off
>> site web developer to upload web pages to it. I have
>> used work arounds to load pages locally up to this
point,
>> but have never had the extensions work properly from any
>> computer off site. I must be doing something basic
>> wrong, but i can't see it.
>>
>> Thanks,
>> Bill
>
>
>.
>

SuperGumby
Mon Oct 06 20:52:29 CDT 2003

I think the main concern is security related. Port 80 has been at the top of
the security hitlist many times. By running a webserver on your domain
controller you increase the possibility of attack and should the attack
succeed you then have to recover your primary DC (or more likely ONLY DC) to
a satisfactorily secure state.

I don't really like using ISA, in an SBS environment, to publish an internal
server either. If it gets compromised you again have to deal with a cleanup
of a system which is a member of the domain.

Another way of dealing with the issue is tri-homing the SBS and running the
webserver in an ISA controlled DMZ. This shifts you slightly from the most
familiar SBS network setup, OK if you wish to learn ISA in ways most of this
group will not be able to assist, possibly resulting in problems which are
unique to tri-homed SBS's. I guess I'm trying to stress that there will be
less people able to advise you in network related issues.

Me, I'd probably go:

internet
|
|
firewall of some kind -- webserver
|
|
SBS (2NIC ISA)
|
|
LAN

leaving the webserver as fully external to the domain.

or better yet, use a hosting company for the webserver and let them worry
about security.

says the man who runs several websites on his SBS, but it's the LoungeAN,
none of our client SBS's run sites.

"Scott" <scott@computertamers.net> wrote in message
news:13f101c38c6f$cfe8e0f0$a001280a@phx.gbl...
> Mark,
>
> I see this post a lot. I am curious as to why. If you
> are not running a major E-commerce site and only need a
> web site for a few people in the outside world to access,
> what is the harm? I've been thinking about doing the same
> thing but am a little nervous after seeing all the "Don't
> do it"'s here. What if a person had a second W2K server
> and had all the access go through the SBS into that
> server? Still a bad idea?
>
> Thanks!
>
> Scott Cady
>
> >-----Original Message-----
> >are you REALLY sure you want to host your own site on
> your sole server???
> >It really isn't advised.
> >
> >--
> >Sincerely,
> >Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
> 4&2000
> >www.MCSE2000.com
> >www.AppLauncher.com
> >
> >
> >
> >"Bill" <bwebb@microdev.net> wrote in message
> >news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
> >> I am having an awful time trying to get SBS2000 to
> accept
> >> a webpage from an outside user and to run extension of
> >> any variety. Could someone point me to explicit
> >> instructions to create a new website (in addition to the
> >> default site already on the system), add the extensions
> >> to it (preferably 2002), and set up access for an off
> >> site web developer to upload web pages to it. I have
> >> used work arounds to load pages locally up to this
> point,
> >> but have never had the extensions work properly from any
> >> computer off site. I must be doing something basic
> >> wrong, but i can't see it.
> >>
> >> Thanks,
> >> Bill
> >
> >
> >.
> >

Scott
Mon Oct 06 21:54:13 CDT 2003

SuperGumby,

Thanks for the info. It answered a lot of questions!


>-----Original Message-----
>I think the main concern is security related. Port 80 has
been at the top of
>the security hitlist many times. By running a webserver
on your domain
>controller you increase the possibility of attack and
should the attack
>succeed you then have to recover your primary DC (or more
likely ONLY DC) to
>a satisfactorily secure state.
>
>I don't really like using ISA, in an SBS environment, to
publish an internal
>server either. If it gets compromised you again have to
deal with a cleanup
>of a system which is a member of the domain.
>
>Another way of dealing with the issue is tri-homing the
SBS and running the
>webserver in an ISA controlled DMZ. This shifts you
slightly from the most
>familiar SBS network setup, OK if you wish to learn ISA
in ways most of this
>group will not be able to assist, possibly resulting in
problems which are
>unique to tri-homed SBS's. I guess I'm trying to stress
that there will be
>less people able to advise you in network related issues.
>
>Me, I'd probably go:
>
>internet
>|
>|
>firewall of some kind -- webserver
>|
>|
>SBS (2NIC ISA)
>|
>|
>LAN
>
>leaving the webserver as fully external to the domain.
>
>or better yet, use a hosting company for the webserver
and let them worry
>about security.
>
>says the man who runs several websites on his SBS, but
it's the LoungeAN,
>none of our client SBS's run sites.
>
>"Scott" <scott@computertamers.net> wrote in message
>news:13f101c38c6f$cfe8e0f0$a001280a@phx.gbl...
>> Mark,
>>
>> I see this post a lot. I am curious as to why. If you
>> are not running a major E-commerce site and only need a
>> web site for a few people in the outside world to
access,
>> what is the harm? I've been thinking about doing the
same
>> thing but am a little nervous after seeing all
the "Don't
>> do it"'s here. What if a person had a second W2K server
>> and had all the access go through the SBS into that
>> server? Still a bad idea?
>>
>> Thanks!
>>
>> Scott Cady
>>
>> >-----Original Message-----
>> >are you REALLY sure you want to host your own site on
>> your sole server???
>> >It really isn't advised.
>> >
>> >--
>> >Sincerely,
>> >Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
>> 4&2000
>> >www.MCSE2000.com
>> >www.AppLauncher.com
>> >
>> >
>> >
>> >"Bill" <bwebb@microdev.net> wrote in message
>> >news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
>> >> I am having an awful time trying to get SBS2000 to
>> accept
>> >> a webpage from an outside user and to run extension
of
>> >> any variety. Could someone point me to explicit
>> >> instructions to create a new website (in addition to
the
>> >> default site already on the system), add the
extensions
>> >> to it (preferably 2002), and set up access for an off
>> >> site web developer to upload web pages to it. I have
>> >> used work arounds to load pages locally up to this
>> point,
>> >> but have never had the extensions work properly from
any
>> >> computer off site. I must be doing something basic
>> >> wrong, but i can't see it.
>> >>
>> >> Thanks,
>> >> Bill
>> >
>> >
>> >.
>> >
>
>
>.
>

Mark
Mon Oct 06 22:05:18 CDT 2003

Scott,
Here is why.....
1) security! Port 80 from the world openned on your sbs box is accepted as
insanity. IIS has had a REAL bad history of security flaws.
2) costs! For what....$10/month you get web stats - beats paying a few
hundred bucks for good reporting that a host provides with Webalizer and
many other scripts like shopping carts, and discussion forms
3) reliability - site can be up all the time, no downtime while rebooting
from windows updates or other things
4) bandwidth - why waste your bandwidth if you do have a busy site,
especially with DSL if you only have 200k for web people to pull from
(remember that 200k upload means 200k download to the outside world)
5) costs! Ok, add a second 2000 server....HOW MUCH IS THAT???? $1000 for a
box, $1000 for license and a day to build and pack it. Gee, $10/month beats
that!
6) SSL. Ever setup a public cert? PITA.....a web host can do it much
easier/quicker
7) other perks:
-you now have a place for people to use for FTP that won't compromise
your server
-POP accounts! Sorry, but I am a FIRM believer in having SBS pull down
mail with Popbeamer than having SBS host the MX record for ALL of the
reasons above: costs, reliability and security

I host a CPanel webserver in a datacenter for me and my clients to use and
we are always up, have lots of features, are very secure, and costs are
minimal. The fewer ports that hit your server, the better. I also think
that people that allow users to use their home PCs for VPN instead of
Terminal Services borderline on insanity as well.


--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Scott" <scott@computertamers.net> wrote in message
news:13f101c38c6f$cfe8e0f0$a001280a@phx.gbl...
> Mark,
>
> I see this post a lot. I am curious as to why. If you
> are not running a major E-commerce site and only need a
> web site for a few people in the outside world to access,
> what is the harm? I've been thinking about doing the same
> thing but am a little nervous after seeing all the "Don't
> do it"'s here. What if a person had a second W2K server
> and had all the access go through the SBS into that
> server? Still a bad idea?
>
> Thanks!
>
> Scott Cady
>
> >-----Original Message-----
> >are you REALLY sure you want to host your own site on
> your sole server???
> >It really isn't advised.
> >
> >--
> >Sincerely,
> >Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
> 4&2000
> >www.MCSE2000.com
> >www.AppLauncher.com
> >
> >
> >
> >"Bill" <bwebb@microdev.net> wrote in message
> >news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
> >> I am having an awful time trying to get SBS2000 to
> accept
> >> a webpage from an outside user and to run extension of
> >> any variety. Could someone point me to explicit
> >> instructions to create a new website (in addition to the
> >> default site already on the system), add the extensions
> >> to it (preferably 2002), and set up access for an off
> >> site web developer to upload web pages to it. I have
> >> used work arounds to load pages locally up to this
> point,
> >> but have never had the extensions work properly from any
> >> computer off site. I must be doing something basic
> >> wrong, but i can't see it.
> >>
> >> Thanks,
> >> Bill
> >
> >
> >.
> >

Bill
Tue Oct 07 00:35:50 CDT 2003

Yes, these are low useage sites, the clients just want a
minimal presence on the net. Does anyone have an
experience doing this, or has everyone just ignored this
part of the product?

Bill
>-----Original Message-----
>are you REALLY sure you want to host your own site on
your sole server???
>It really isn't advised.
>
>--
>Sincerely,
>Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
4&2000
>www.MCSE2000.com
>www.AppLauncher.com
>
>
>
>"Bill" <bwebb@microdev.net> wrote in message
>news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
>> I am having an awful time trying to get SBS2000 to
accept
>> a webpage from an outside user and to run extension of
>> any variety. Could someone point me to explicit
>> instructions to create a new website (in addition to
the
>> default site already on the system), add the extensions
>> to it (preferably 2002), and set up access for an off
>> site web developer to upload web pages to it. I have
>> used work arounds to load pages locally up to this
point,
>> but have never had the extensions work properly from
any
>> computer off site. I must be doing something basic
>> wrong, but i can't see it.
>>
>> Thanks,
>> Bill
>
>
>.
>

Mark
Tue Oct 07 08:14:53 CDT 2003

Bill,
it's not a matter of ignoring....it's a matter of using the right tool
for the right job and port 80 on your 1 main server is nothing that people
do without some good hard thought of the consequences. Many larger
companies outsource hosting to avoid the security issues. You can get
packages for like $3/month!

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Bill" <bwebb@microdev.net> wrote in message
news:019b01c38c94$de4c0bc0$a001280a@phx.gbl...
> Yes, these are low useage sites, the clients just want a
> minimal presence on the net. Does anyone have an
> experience doing this, or has everyone just ignored this
> part of the product?
>
> Bill
> >-----Original Message-----
> >are you REALLY sure you want to host your own site on
> your sole server???
> >It really isn't advised.
> >
> >--
> >Sincerely,
> >Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
> 4&2000
> >www.MCSE2000.com
> >www.AppLauncher.com
> >
> >
> >
> >"Bill" <bwebb@microdev.net> wrote in message
> >news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
> >> I am having an awful time trying to get SBS2000 to
> accept
> >> a webpage from an outside user and to run extension of
> >> any variety. Could someone point me to explicit
> >> instructions to create a new website (in addition to
> the
> >> default site already on the system), add the extensions
> >> to it (preferably 2002), and set up access for an off
> >> site web developer to upload web pages to it. I have
> >> used work arounds to load pages locally up to this
> point,
> >> but have never had the extensions work properly from
> any
> >> computer off site. I must be doing something basic
> >> wrong, but i can't see it.
> >>
> >> Thanks,
> >> Bill
> >
> >
> >.
> >

Scott
Tue Oct 07 08:21:35 CDT 2003

Wow. Thanks for the info. Guess I'd better just let
someone else take care of the web hosting. Liked your
comment about bordering on insanity with the VPN instead
of TS. I fall under that one too but would like to think
in my own little world (insane as it is), it is more of a
beginners mistake than insanity. Learning all the
time......

>-----Original Message-----
>Scott,
> Here is why.....
>1) security! Port 80 from the world openned on your sbs
box is accepted as
>insanity. IIS has had a REAL bad history of security
flaws.
>2) costs! For what....$10/month you get web stats -
beats paying a few
>hundred bucks for good reporting that a host provides
with Webalizer and
>many other scripts like shopping carts, and discussion
forms
>3) reliability - site can be up all the time, no downtime
while rebooting
>from windows updates or other things
>4) bandwidth - why waste your bandwidth if you do have a
busy site,
>especially with DSL if you only have 200k for web people
to pull from
>(remember that 200k upload means 200k download to the
outside world)
>5) costs! Ok, add a second 2000 server....HOW MUCH IS
THAT???? $1000 for a
>box, $1000 for license and a day to build and pack it.
Gee, $10/month beats
>that!
>6) SSL. Ever setup a public cert? PITA.....a web host
can do it much
>easier/quicker
>7) other perks:
> -you now have a place for people to use for FTP that
won't compromise
>your server
> -POP accounts! Sorry, but I am a FIRM believer in
having SBS pull down
>mail with Popbeamer than having SBS host the MX record
for ALL of the
>reasons above: costs, reliability and security
>
>I host a CPanel webserver in a datacenter for me and my
clients to use and
>we are always up, have lots of features, are very secure,
and costs are
>minimal. The fewer ports that hit your server, the
better. I also think
>that people that allow users to use their home PCs for
VPN instead of
>Terminal Services borderline on insanity as well.
>
>
>--
>Sincerely,
>Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
4&2000
>www.MCSE2000.com
>www.AppLauncher.com
>
>
>
>"Scott" <scott@computertamers.net> wrote in message
>news:13f101c38c6f$cfe8e0f0$a001280a@phx.gbl...
>> Mark,
>>
>> I see this post a lot. I am curious as to why. If you
>> are not running a major E-commerce site and only need a
>> web site for a few people in the outside world to
access,
>> what is the harm? I've been thinking about doing the
same
>> thing but am a little nervous after seeing all
the "Don't
>> do it"'s here. What if a person had a second W2K server
>> and had all the access go through the SBS into that
>> server? Still a bad idea?
>>
>> Thanks!
>>
>> Scott Cady
>>
>> >-----Original Message-----
>> >are you REALLY sure you want to host your own site on
>> your sole server???
>> >It really isn't advised.
>> >
>> >--
>> >Sincerely,
>> >Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
>> 4&2000
>> >www.MCSE2000.com
>> >www.AppLauncher.com
>> >
>> >
>> >
>> >"Bill" <bwebb@microdev.net> wrote in message
>> >news:04d701c38c3f$c54fde80$a301280a@phx.gbl...
>> >> I am having an awful time trying to get SBS2000 to
>> accept
>> >> a webpage from an outside user and to run extension
of
>> >> any variety. Could someone point me to explicit
>&