Web Server

Best Practice Document For Web Server Deployment

Network filtering:

Place your web server(s) in a DMZ. Set your firewall to drop connections to your web server on all ports but http (port 80) or https (port 443).

Host based security:

Remove all unneeded services from your web server, keeping FTP (but only if you need it) and a secure login capability such as secure shell. An unneeded service can become an avenue of attack.

Limit the number of persons having administrator or root level access.

Apply relevant security patches as soon as they are announced and tested on a pre-production system.

Disallow all remote administration unless it is done using a one-time password or an encrypted link.

If the machine must be administered remotely, require that a secure capability such as secure shell is used to make a secure connection. Do not allow telnet or non-anonymous ftp (those requiring a username and password) connections to this machine from any untrusted site. It would also be good to limit these connections only to a minimum number of secure machines and have those machines reside within your Intranet.

Configuring the Web service/application:

If you must use a GUI interface at the console, remove the commands that automatically start the window manager from the .RC startup directories and then create a startup command for the window manager. You can then use the window manager when you need to work on the system, but shut it down when you are done. Do not leave the window manager running for any extended length of time.

Run the web server in a chroot-ed part of the directory tree so it cannot access the real system files.

Run the anonymous FTP server (if you need it) in a chroot-ed part of the directory tree that is different from the web server’s tree.

Remove ALL unnecessary files such as phf from the scripts directory /cgi-bin.

Remove the “default” document trees that are shipped with Web servers such as IIS and ExAir.

Apply relevant security patches as soon as they are announced and tested on a pre-production system.

Auditing/logging:

Log all user activity and maintain those logs either in an encrypted form on the web server or store them on a separate machine on your Intranet, or write to “write-once” media.

Monitor system logs regularly for any suspicious activity.

Install some trap macros to watch for attacks on the server (such as the PHF attack).

Create macros that run every hour or so that would check the integrity of passwd and other critical files.

When the macros detect a change, they should send an e-mail to the system manager, write a message to logs, set off a pager, etc..

Content management:

Do all updates from your Intranet. Maintain your web page originals on a server on your Intranet and make all changes and updates here; then “push” these updates to the public server through an SSH or SSL connection. If you do this on a hourly basis, you can avoid having a corrupted server exposed for a long period of time.

Write a script to download HTML pages and check against a template, if changes are noted, upload the correct version.

Intrusion Detection:

Scan your web server periodically with tools like ISS, Nmap, Nessus or Satan to look for vulnerabilities.

Have intrusion detection software monitor the connections to the server. Set the detector to alarm on known exploits and suspicious activities and to capture these sessions for review. This information can help you recover from an intrusion and strengthen your defenses.

About the Author

Somnath has been working as a Security Analyst at iViZ Techno Solutions,India and have successfully carried out numerous assignments on vulnerability assessment, penetration testing, web application security, Threat modeling,PCI DSS Compliance for various Banking sector firms, financial institutions, Govt. organizations, Defense, Software development Companies, leading BPOs and various small-mid-large industries.He holds security certifications like OSCP and CNSM.

What do you need to run a web server or a website of your computer?

I want to know what you need to run a web server or website off of a computer and how to set one up. I don’t wnat anything extreme just a basic web or website (I don’t know proper terminology) server.

Any computer, add more hard drives for space,
server software, and max out the RAM that the motherboard will support!

If you talk performance, it is still the same things just more of it.

Better server = larger case that supports over eight hard drives, motherboard that supports dual/quad/2 or 4 CPUs. Redundant power supply. Cooling fans to keep inside of case cool.

Your software: Operating System = Server Software, Web creation software, application software, router, two network cards, Back up server – so, where do you want to go, it is up to your pocket book.

Go to www,Microsoft.com the training site.

Computer Help Page

http://www.nu2.nu/pebuilder/ http://oss.netfarm.it/winpe/
http://www.paraglidernc.com/ http://www.bootcd.us/

VISTA Upgrade or Requirements

http://www.microsoft.com/windows/products/windowsvista/buyorupgrade/upgradeadvisor.mspx

http://www.diskgenius.com/

http://www.pcbeginner.com/tools/pcdoctor.htm

http://www.pcguide.com/byop/index.htm

http://www.ntfs.com/boot-disk.htm

http://www.softpedia.com/get/System/Boot-Manager-Disk/

http://www.freedownloadscenter.com/Best/ntfs-boot-iso.html

http://www.disk-image.net/products.htm

http://www.bootdisk.com/bootdisk.htm

http://www.errornuker.com/info/01.php?hop=product1

http://www.nu2.nu/pebuilder

http://www.majorgeeks.com/downloads2.html

http://www.ntcompatible.com/Acronis_True_Image_9.0_Build_2337_s61449.html

http://www.theosfiles.com/

http://www.data-recovery-reviews.com/windows-startup-disasterrecovery.htm?gclid=CMSl0b7X2YcCFSJxYAodKy6Lpw

http://www.winternals.com/

http://www.pcworld.com/downloads/file/fid,25181-order,1-page,1-c,alldownloads/description.html

http://www.softpedia.com/get/System/Boot-Manager-Disk/Windows-XP-PowerPacker.shtml

http://www.extremetech.com/article2/0,1697,674406,00.asp

http://windows.about.com/od/tipsarchive/l/bltip632.htm
Visit our Helpdesk for PC Bug Doctor
http://www.maximumsoftwaresupport.com
PC Beginner software
http://www.pchell.com/support/limitedconnectivity.shtml
http://www.nu2.nu/pebuilder/
http://www.bootdisk.com/utility.htm
Chapter 1: Purchasing Components
Chapter 2: Component Overview
Chapter 3: Installing the CPU, Heatsink, and RAM On The Mainboard
Chapter 4: Installing The Mainboard In The Case
Chapter 5: Installing Drives
Chapter 6: Connecting Components
Chapter 7: Installing AGP and PCI Cards
Chapter 8: Testing the System and Completing Assembly
Chapter 9: Installing Windows XP
Chapter 10: Configuring Windows XP
Chapter 11: Installing A Dual Boot Operating System (Linux And Windows XP)
Chapter 12: Home Video — “So, You Want to Be the Next Steven Spielberg?”
Chapter 13: What’s Next?

http://www.hardwareanalysis.com
http://www.majorgeeks.com/download4007.html
http://www.nu2.nu/bootdisk/
http://www.free-pc-checkup.com/
http://www.pctools.com/registry-mechanic/?ref=Googlebspeed
http://pcperformancetools.com/recovermyfiles.htm
http://free.grisoft.com/freeweb.php/doc/…
http://www.download.com/3000-2144-100459…
http://www.worldstart.com/tips/tips.php/…
http://www.aarp.org/learntech/computers/…
http://www.microsoft.com/windowsxp/using…
http://www.zonelabs.com/store/content/co…

BUILD YOU OWN COMPUTER:
www.directron.com
www.newegg.com

A Good PC Cleaner

http://www.pc-error-cleaner.com/?gclid=COzW8YTD0ogCFRL1YgodAD0pbg

NTFS Boot Disk:

http://www.ntfs.com/boot_disk_includes.htm

To place Active@ KillDisk Pro onto a floppy disk type the following at the command prompt:
COPY G:KILLDISK.EXE A:
COPY G:DOS4GW.EXE A:
The above assumes that the G: drive is the bootable CD-ROM drive and the A: drive is the floppy disk drive.
DOS4GW.EXE is a required file for Active@ KillDisk, Active@ UNERASER and Active@ Disk Image.

http://www.download.com/BartPE-Bootable-Live-Windows-CD-DVD/3000-2094_4-10611130.html

Make your own webserver free Apache

Waring Pro BFS50B Professional Buffet Server and Warming Tray $60.99 Waring has been making products for commercial kitchens for over 60 years. Today Waring Pro brings that expertise home with premium, commercial-quality products, including the Professional Buffet Server & Warming Tray. Entertaining friends and family is easier than ever, with Waring Pro. Look like a professional in your own home! The Waring Pro Professional Buffet Server & Warming Tray is complete…

Beverage Lemonade Dispenser 1.5 Gallon $21.00 In the mood of something cold without the hassle of running back and forth to your refrigerator? Here is the most classy lemonade jug you have ever seen. Just fill it up with something cold, and have it host you all day long at the push of a finger. This drink jug great for parties and picnics too. Dimensions: 16″ x 8″ x 7″…

COLOR6319 COLOR6319…

Web-Based Labs: MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory (Exam #70-640) $75.25 …

Respironics Video/Audio Components – Analog Bullet Camera with Integrated Infrared Illumination …

CABLES UNLIMITED PWR-LAP-SP11 100-Watt Universal AC Power Supply with USB Power Port $79.09 Technical InformationProduct Type: AC AdapterInput Voltage: 120 V AC Input Voltage: 15 V DC to 24 V DC Output Power: 90WMiscellaneousCompatibility: Manufacturers of Laptop Models:AveratecCompaqDellFujitsuGatewayHPIBMPanasonicSonySotecToshibaWinbookWarrantyStandard Warranty: 1 Year(s) Limited…

4-Channel Web Server $671.95 WhiteFire Series 4-Source Digital Broadband IR System…

Tripp Lite A102-02M Digital Optical Audio Cable, 2x Toslink – 2M (6ft) $22.62 Tripp Lite’s premium Toslink Digital Optical Cable provides the ultimate in pure, digital audio quality. Using superior grade optical fiber, and precision polished optical connectors, Toslink cables offer a clean signal at even the most extreme volumes to give you a detailed, rich sound. Tripp Lite warrants this cable to be from defects in material and workmanship for life. Main FeaturesManufactu…

Cables Unlimited USB 2.0 to Serial DB9 Adapter (USB-2920) $35.88 This adapter is the easiest way to add a serial port to your computer. Many PDAs, digital cameras, GPS units, barcode scanners, and other equipment require a serial connection and many newer computers dont have serial ports. This fully plug and play adapter is perfect for people with the latest high performance USB only computers. Includes a 2 USB Cable…

Belkin F3U133-06 Pro Series Hi-Speed USB Cable (Six-Feet) $0.01 The Belkin F3U133-06 USB Device Cable: flexible, strong, durable, and error free. You may never find a human companion with all these qualities, so console yourself by spending some quality time with this Belkin USB Device Cable! Belkin lifetime warranty Fully compatible with Macintosh Supports up to 127 devices on a daisy-chain configuration Hot-pluggable Flextec cable jacket is extr…

Web Server Administration $90.35 Web Server Administration

Sun Web Server $43.53 Sun Web Server

Setting Up a Web Server $19.09 Setting Up a Web Server

Programming Web Server Applications $4.23 Programming Web Server Applications

Web Server Construction Kit for the Macintosh $2.44 Web Server Construction Kit for the Macintosh

Video Web Server With Ptz Controls $195.99 SECURITY LABS SLW1010 A/V WEB SERVER WITH PTZ CONTROLS

Sun Web Server[eBook] $43.17 pSun Web Server: The Essential GuidepBWilliam Nelson /BliB Arvind Srinivasan /BliB Murthy Chintalapati (CVR) /BB¿pForeword by Scott G. McNealy/BpThe authoritative, comprehensive guide to Sun Web Server 7.0pSun Web Server is the secure web serving platform of choice for large-scale enterprises in industries from finance and telecommunications to travel and government. Now there’s a complete, detailed guide to the latest Sun Web Server 7.0 release. Drawing on unsurpassed experience both training and supporting Sun’s enterprise customers, this book’s authors cover everything that developers, administrators, and architects need to know to implement and support Sun Web Server 7.0 within a single node or across an entire server farm.pServer administrators will find task-focused coverage and hands-on examples for installation, configuration, cluster management, monitoring, and troubleshooting. Developers and architects will gain…

Cisco Fax Server Web Access License 1 Server CFS9XWEBACCESS $2754.48 Cisco Fax Server Web Access License 1 Server CFS9XWEBACCESS

Microsoft Windows Web 2008 Server – 64-bit LWA00078 $406.66 Microsoft Windows Web 2008 Server – 64-bit LWA00078

Radware Web Server Director WSDDS2GE+8FE $919.55 Radware Web Server Director WSDDS2GE+8FE

Radware Web Server Director WSDDS2GE+8FE64 $919.55 Radware Web Server Director WSDDS2GE+8FE64

Web Services Handbook For Websphere Application Server 6.1 $390.89 Web Services Handbook For Websphere Application Server 6.1

Powering Your Web Site With Windows Nt Server $2.01 Powering Your Web Site With Windows Nt Server

iNotes Web Access 6 with Domino 6.0.2 Server $13.95 iNotes Web Access 6 with Domino 6.0.2 Server

Java Programming With The Sap Web Application Server $159.88 Java Programming With The Sap Web Application Server

Web Programming In Abap With The Sap Web Application Server (2nd Editi $49.93 Web Programming In Abap With The Sap Web Application Server (2nd Editi

Respironics Video/Audio Components – 4 Port Video Web Server $1209.99 4 Port Video Web Server.

Web Development: World Wide Web Consortium, Web Server, Electronic Commerce, Bookmarklet, Web Directory, Web Colors, Sobi2, Microformat $14.14 Web Development: World Wide Web Consortium, Web Server, Electronic Commerce, Bookmarklet, Web Directory, Web Colors, Sobi2, Microformat

Free Web Server Software: Apache HTTP Server, Roxen, Virtuoso Universal Server, Apache Tomcat, Lighttpd, Cherokee HTTP Server, Devwex $19.99 Free Web Server Software: Apache HTTP Server, Roxen, Virtuoso Universal Server, Apache Tomcat, Lighttpd, Cherokee HTTP Server, Devwex

Microsoft Windows Web 2008 Server – 64-bit $379.99 Operating System DVD-ROM OEM License and Media LWA-00078 www.microsoft.com Windows Web Server 2008 designed to be used specifically as a single-purpose Web server, Windows Web Server 2008 delivers on a rock-solid foundation of Web infrastructure capabilities in the next-generation Windows Server 2008. Integrated with the newly re-architected IIS 7.0, ASP.NET, and the Microsoft .NET Framework, Windows Web Server 2008 enables any organization to rapidly deploy Web pages, Web sites, Web applications, and Web services. PC Internet Information Services 7.0 Server Manager Server Core License Quantity: 1 server (1-2 CPU) Microsoft Corporation Windows Web 2008 Server – 64-bit Windows Web 2008 Server – 64-bit Server Processor: 1.4 GHz (x64) Minimum 2 GHz or faster Recommended Hard Disk: 10 GB Minimum 40 GB or greater Recommended Memory: 512 MB RAM Minimum 2 GB RAM or greater Recommended Optical Drive: DVD-ROM Other: Super VGA (800 × 600) or higher resolution monitor Keyboard and Microsoft Mouse or compatible pointing device Microsoft

Website Management: Web Server, Content Management System, Web Hosting Service, Wordpress, Web Content, Machpanel, Heritage Web Solutions $19.99 Website Management: Web Server, Content Management System, Web Hosting Service, Wordpress, Web Content, Machpanel, Heritage Web Solutions

Web Server Technology $65.57 This authoritative presentation takes readers beyond the basics to provide the underlying principles and technical details of how World Wide Web servers really work. It explains current technology and suggests enhanced and expanded methods for disseminating information via the Web.

Web Development With Java Server Pages $27.36 Dynamic content personalized, customized, and up-to-the-minute is a key component of site development on the World Wide Web today. Java Server Pages (JSP) is a new server-side technology for generating dynamic content in Web pages and other on-line applications. This guide to JSP covers all aspects of development for the new versions of the JSP and Servlet specifications (1.2 and 2.3, respectively). The many new features introduced in these versions are discussed, including servlet filters and enhancements to the API for JSP Tag Libraries. The interaction between JSP and other J2EE technologies, such as Enterprise JavaBeans, are also covered, as are comparisons to similar dynamic content systems including CGI, Active Server Pages, Cold Fusion, and PHP.

Microsoft Windows Web 2008 Server – 64-bit License and Media – OEM – PC $367.99 Windows Web Server 2008 designed to be used specifically as a single-purpose Web server, Windows Web Server 2008 delivers on a rock-solid foundation of Web infrastructure capabilities in the next-generation Windows Server 2008. Integrated with the newly re-architected IIS 7.0, ASP.NET, and the Microsoft .NET Framework, Windows Web Server 2008 enables any organization to rapidly deploy Web pages, Web sites, Web applications, and Web services.

Sun Web Server: The Essential Guide $52.8 P style=MARGIN: 0pxBWilliam C. Nelson/Bhas been in the IT industry for more than 20 years. During that time he has been a developer, instructor, author, consultant, and project manager with a focus on web tier, identity, and access management products. Bill’s extensive experience and effective communication skills allow him to bridge the technical/business divide that so often prevents communication between the data center and the board room./PP style=MARGIN: 0px /PP style=MARGIN: 0pxBill has authored more than 10 courses for Sun Microsystems focused on the Java Enterprise System. He has been working with Sun’s Directory, Web, and Identity products for several years and brings that experience to the courses, books, and articles he has written. Bill currently lives in Tampa, Florida, where he manages a professional services organization that specializes on identity and access management./PP style=MARGIN: 0px /PP style=MARGIN: 0pxBArvind Srinivasan/Bis one of three architects on the Sun Web Server development engineering team. Since joining Sun Microsystems in 2000, he has worked as an individual contributor and has been the technical lead for the Servlet/JSP container of Sun’s Web Server and Application Server. Mass virtual hosting and the superior performance/scalability of the Servlet/JSP container are two of his key contributions to the Sun Java System Web Server. Arvind is also the co-author ofIJava Networking and Awt Api Superbible: The Comprehensive Reference for the Java Programming Language/I(ISBN: 157169031X)./PP style=MARGIN: 0px /PP style=MARGIN: 0pxBMurthy (CVR) Chintalapati/B(who goes by CVR) is a development engineering leader responsible for Sun’s web tier products, including Sun Web Server 7.0 and the OpenSolaris Web Stack (AMP). He specializes in infrastructure software products for enterprises deploying web 2.0 technologies, scalability on multi-core and c@Jfffffgÿ¾Úð

Microsoft Windows Web Server 2008 R2 – 64-bit LWA00984 $461.1 Microsoft Windows Web Server 2008 R2 – 64-bit LWA00984

Cisco Meetingplace Shadow Server Web Software Release 5.3 MPSHADOWWEB53 $4034.64 Cisco Meetingplace Shadow Server Web Software Release 5.3 MPSHADOWWEB53

Radware Web Server Director 8 Fe With SFP WSDDS2GE+8XFE256M $1147.55 Radware Web Server Director 8 Fe With SFP WSDDS2GE+8XFE256M

The Developer’s Guide to Oracle(R) Web Application Server 3 $2.51 The Developer’s Guide to Oracle(R) Web Application Server 3

The Mac Web Server Book: Tools & Techniques for Building Your Internet $2.38 The Mac Web Server Book: Tools & Techniques for Building Your Internet

Simplify Web Site Management With Server-Side Includes, Cascading Styl $39.1 Simplify Web Site Management With Server-Side Includes, Cascading Styl

Web-Based Labs for MCTS Guide to Microsoft Windows Server 2008 Network $63.34 Web-Based Labs for MCTS Guide to Microsoft Windows Server 2008 Network

Web Development with Exchange Server $27.65 Packed with solid programming examples, this crystal-clear guide explains how to work with Active Directory, Collaboration Data Objects, Outlook Web Access, and other Exchange programming tools–and create sophisticated collaborative and workflow applications using any COM-compatible language.

The Linux Web Server CD Bookshelf $1.1 DIVpMore and more, technology professionals are relying on the Web, online help, and other online information sources to solve their tough problems. Now O’Reilly’siLinux Web Server CD Bookshelf/igives you the same convenient online access to your favorite O’Reilly books–from your CD-ROM drive./ppiThe Linux Web Server CD Bookshelf/idelivers the information power of six complete O’Reilly Animal Guides covering the best of the open source web platform. We’ve included unabridged versions ofiRunning Linux,/i3rd Edition;iLinux in a Nutshell,/i3rd Edition;iApache: The Definitive Guide,/i2nd Edition;iMySQL & mSQL;/iiProgramming the Perl DBI;/iandiCGI Programming with Perl,/i2nd Edition. As a bonus, you also get the new paperback version ofiLinux in a Nutshell./i/ppThis confluence of open source technologies represents the platform of choice for developing and deploying high performance web applications. Apache, MySQL, and Perl/Python/PHP are the tools that make Linux a great applications development platform, especially for robust web applications that run on Linux servers./ppNever has it been easier to find what you need to know about Linux web servers online. Formatted in HTML,iThe Linux Web Server CD Bookshelf/ican be accessed with any web browser. The books–all 3276 pages of O’Reilly reference and tutorials–are fully searchable and cross-referenced, so you can search the individual index for each book or the master index for the entire collection. With the CD Bookshelf, you have a complete library of technical books that you can easily carry with you anywhere you need it./p/div

Microsoft Windows Web 2008 Server – 64-Bit – License And Media – Oem – Pc $416.66 windows Web Server 2008 Designed To Be Used Specifically As A Single-purpose Web Server, Windows Web Server 2008 Delivers On A Rock-solid Foundation Of Web Infrastructure Capabilities In The Next-generation Windows Server 2008. Integrated With The Newly Re-architected Iis 7.0, Asp.net, And The Microsoft .net Framework, Windows Web Server 2008 Enables Any Organization To Rapidly Deploy Web Pages, Web Sites, Web Applications, And Web Services. *Brand Name: Microsoft [N92776] UPC: 882224574570 UNSPC: 43233004 0.4 LB 1 Cubes

Linux Apache Web Server Administration[eBook] $25.46 pWith more than 40 percent of the purchase-based server market, Apache is renowned as the most powerful and capable Web server available–and the toughest to master. In this detailed guide, expert Linux professional and Webmaster Charles Aulds tackles the issues that Linux administrators and Webmasters need to know to build stable and hackproof Web servers for intranet, extranet, and Web use. Includes in-depth treatment of configuring, maintaining, and troubleshooting Apache in the real world. BRp BRiLinux Apache Web Server Administration/i is the most complete, most advanced guide to the Apache Web server you’ll find anywhere. This book teaches you, step-by-step, all the standard and advanced techniques you need to know to administer Apache on a Linux box. Hundreds of clear, consistent examples illustrate these techniques in detail–so you stay on track and accomplish all your goals. Coverage includes:BR BRulBR BRliUnderstanding HTTP basicsBR BRliC…

How to Host Your Own Web Server $39.43 Have you ever wondered how difficult it would be to host your own web server or web site on your own computer for everyone on the internet to see? Why pay the $24.95 monthly fee when you can do it yourself for $1.00 a month or better yet FREE!!! This book will show you the steps needed to host your own web server, Screen shots of the applications that you will configure, key terms that you may hear, all in a simple to understand format.