Sucuring win2k network

Printable View

November 13th, 2001, 08:04 PM
estebanf

Sucuring win2k network

This is my first post in these forums....

I'm currently working on a corporate project that involves setting up the hosting of our web site in our offices. I'm not a MSFT sys admin (i rather prefer development, but how can I explain this to my boss Mr. "let cut down the budget"?), so regarding issues like security and performance I feel kind of lost. I have some concerns, and i'd be glad if any one can help me here.

1.- Where can I find guides or checklist that help me to make a secure win 2k server installation?. I've found some at microsoft website, but I'd prefer other sources to get objectives recommendations. I found a couple that talk exclusive about securing IIS 5, and they are usefull. ¿Any body knows if out there exist some like that for SQL server boxes?.

2.- I've been investigating about IPsec. I'm still not sure what the hell it is but, is it worthy to continue the research?

3.- Finally, I'm thinking to use a linux box to Firewall and NAT (masquerading) services.... anybody can recommend source information to setup a Red Hat 7.1 box to acomplish that?

BTW, if you see any misspelled word in my post it's just because I'm from Venezuela... thank you guys
November 13th, 2001, 08:33 PM
IchNiSan

securing win2k

The NSA website has some decent documentation on how to secure W2K, or rather, some guidelines for running secure win2k.

either browse from

www.nsa.gov or go to

http://nsa1.<a rel="nofollow" href="...nxion.com/</a>

********Edit, GRRRR, this board keeps putting new characters in that last url.....
********

I'm sure I dont need to say this, but I will anyway...

The documents are pdf's so you will need Adobe Acrobat REader...
November 13th, 2001, 08:39 PM
Focmaester

I would check out the NT faq
www.ntfaq.com

it has a great forum and covers everything from M$
November 13th, 2001, 08:50 PM
Syxx

Why doesn't Mr. "lets cut down the budget" get rid of high Microsoft liscense fees and install some flavor of linux.

[email protected]
November 13th, 2001, 08:55 PM
estebanf

Already stuck

our app is a ASP / DLL / MSSQL web site... We are planning an enviroment with 8 boxes, but 6 must be MS boxes (3 webs, 2 sql and 1 AD Domain controller).we can cut just in the file server and firewall.....
November 13th, 2001, 11:30 PM
guyh

The best site forr IIS is www.iisfaq.com, and it includes lots of suff on securing them.
November 14th, 2001, 05:21 AM
Tedob1

simplify your life and take a look at ISA server. If you install linux firewall all the windows folks you work with are going to get really p*ss3d at you, 'cause they can't work it, thats what happened where i work anyway.
November 14th, 2001, 08:26 AM
faust

Microsoft's site has TONS of guides to help secure your Win 2k environment. Microsoft Security

Also they have a securtity toolkit that they will mail to you, free of charge!
November 20th, 2001, 12:07 AM
nyx

Quote:

simplify your life and take a look at ISA server

I agree, i have set up an ISA Server box at work, and its working just fine ( at least for now :) ) I'm using it as Web cache / Firewall / Web Proxy.

In terms of security we have a cisco 2600 for connecting to the internet at a 256Kbs ( Frame Relay ), connected directly at the ISA Server, so we have 2 levels of protection that way.

A great place to look for information about ISA Server is www.isaserver.org. For me was a great help.

For securing your windows servers use this tool. It downloads a xml file from microsoft and checks your system for available updates. The good thing is that you can run it to test all machines on your network( this saves a lot of trouble ), as long as you have administrator access. W2K/NT(/XP?) only.

Hope I could help.
November 21st, 2001, 03:35 PM
Pr3shuR

Re: Sucuring win2k network

Quote:

Originally posted by estebanf
3.- Finally, I'm thinking to use a linux box to Firewall and NAT (masquerading) services.... anybody can recommend source information to setup a Red Hat 7.1 box to acomplish that?

http://www.linuxdoc.org/

You'll find anything you need there!
November 25th, 2001, 05:19 AM
Dygital

The "Full Raw Socket" Debate

I am just wonering what all of your opinions are on M$ decision to include user level access to the Berkly Raw Socket interface icluded in XP. I have several questions as fallows...

1. Was it a neccesary funtion to include?

2. Can we expect a new wave of PC based DOS attacks using the interface?

3. What can be done about "forged" malicious packets in the occurance of sucj an attack?