setup of IIS server

Thank you John.

Just connecting the front and back ends together. There
is just a single 2003 server behind the router.

J

 >-----Original Message-----
 >Hi Jerry,
 >
 >1) If it's doing any real web serving, go with a
server. Have you looked
 >into SBS 2003?
 >
 >2) Not sure I fully understand. Are there two separate
networks behind the
 >router, or are you just connecting the front and back
ends together?
 >
 >3) ICF. No. It will work, but really I suggest a
better firewall. Once
 >again, if you look into SBS, you'll get ISA which can
protect your network.
 >Alternatively, you can put the IIS server behind the
router and just forward
 >the port
 >
 >--
 >--Jonathan Maltz [Microsoft MVP - Windows Server]
 >http://www.visualwin.com - A Windows Server 2003 visual,
step-by-step
 >tutorial site
 >Only reply by newsgroup. Any emails I have not
authorized are deleted
 >before I see them.
 >
 >
 >"Jerry" <tohono_celador DeleteThis @comcast.net> wrote in message
 >news:02b501c3b6f2$02e4dd40$a401280a@phx.gbl...
  >> I've some questions about setting up an IIS server.
  >>
  >> 1) XP or Server 2003?
  >> Application: mnimal webpage serving, VPN, some e-mail;
a
  >> small business setting, Server 2003, w/AD.
  >>
  >> 2) In my DMZ, behind a cable modem, infront of a
  >> router. Two NICs to pass the internet connection from
  >> the modem through the IIS server to the router, bridge
  >> the two networks?
  >>
  >> 3. ICF firewall to protect the front end? The router
  >> will protect the back.
  >>
  >> Thank you.
  >>
  >> Jerry
  >>
  >>
 >
 >
 >.
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: setup of IIS server 

I'd still recommend a "real" firewall. Even RRAS (included with Windows)
would be a better solution than ICF + a hardware router

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
<a style='text-decoration: underline;' href="http://www.visualwin.com" target="_blank">http://www.visualwin.com</a> - A Windows Server 2003 visual, step-by-step
tutorial site
Only reply by newsgroup. Any emails I have not authorized are deleted
before I see them.


"Jerry" <tohono_celador.DeleteThis@comcast.net> wrote in message
news:99dc01c3b700$b185e110$a601280a@phx.gbl...
 > Thank you John.
 >
 > Just connecting the front and back ends together. There
 > is just a single 2003 server behind the router.
 >
 > J
 >
  > >-----Original Message-----
  > >Hi Jerry,
  > >
  > >1) If it's doing any real web serving, go with a
 > server. Have you looked
  > >into SBS 2003?
  > >
  > >2) Not sure I fully understand. Are there two separate
 > networks behind the
  > >router, or are you just connecting the front and back
 > ends together?
  > >
  > >3) ICF. No. It will work, but really I suggest a
 > better firewall. Once
  > >again, if you look into SBS, you'll get ISA which can
 > protect your network.
  > >Alternatively, you can put the IIS server behind the
 > router and just forward
  > >the port
  > >
  > >--
  > >--Jonathan Maltz [Microsoft MVP - Windows Server]
  > >http://www.visualwin.com - A Windows Server 2003 visual,
 > step-by-step
  > >tutorial site
  > >Only reply by newsgroup. Any emails I have not
 > authorized are deleted
  > >before I see them.
  > >
  > >
  > >"Jerry" <tohono_celador.DeleteThis@comcast.net> wrote in message
  > >news:02b501c3b6f2$02e4dd40$a401280a@phx.gbl...
   > >> I've some questions about setting up an IIS server.
   > >>
   > >> 1) XP or Server 2003?
   > >> Application: mnimal webpage serving, VPN, some e-mail;
 > a
   > >> small business setting, Server 2003, w/AD.
   > >>
   > >> 2) In my DMZ, behind a cable modem, infront of a
   > >> router. Two NICs to pass the internet connection from
   > >> the modem through the IIS server to the router, bridge
   > >> the two networks?
   > >>
   > >> 3. ICF firewall to protect the front end? The router
   > >> will protect the back.
   > >>
   > >> Thank you.
   > >>
   > >> Jerry
   > >>
   > >>
  > >
  > >
  > >.
  > ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: setup of IIS server 

On Sat, 29 Nov 2003 19:28:24 -0800, "Jerry"
<tohono_celador.TakeThisOut@comcast.net> wrote:

 >I've some questions about setting up an IIS server.
 >
 >1) XP or Server 2003?
 >Application: mnimal webpage serving, VPN, some e-mail; a
 >small business setting, Server 2003, w/AD.

Okay, you *have* Server 2003 and are asking wht to set up for your web
server? Realize that any workstation OS has limitations in running a
web server.

 >2) In my DMZ, behind a cable modem, infront of a
 >router. Two NICs to pass the internet connection from
 >the modem through the IIS server to the router, bridge
 >the two networks?

Huh? Most cable modems don't route, you need a separate box for that.
If you connect as you describe, your web server now becomes a gateway
and you have to deal with two gateways to reach your internet
connection. Don't do it. (And it's not a DMZ as described)

Cable modem to router, router DMZ port forwarded to web server.

 >3. ICF firewall to protect the front end? The router
 >will protect the back.

No. Completely no. Start here:

<a style='text-decoration: underline;' href="http://www.microsoft.com/security/" target="_blank">http://www.microsoft.com/security/</a>
<a style='text-decoration: underline;' href="http://www.securityadmin.info/" target="_blank">http://www.securityadmin.info/</a>

And do a Google for "Bastion Host" before you go anywhere near this
setup.

And I stand corrected on my first answer, if you run your web server
outside your router, then don't run anything else on it. Better yet,
gte yourself a decent hardwrae firewall with DMZ, a SonicWall for
example.

Jeff<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: setup of IIS server