i decided to shut down my webserver because i noticed in the event log that it has been HAMMERED for the past 48 hours by some jackass(es) trying to get onto it with every username in the book, especially the admin account.

it currently is running ISA Server 2000 and is behind an cheap SPI firewall (port forwarding, not DMZ) and I was thinking of putting BlackICE Server on it in addition to. The admin account has been renamed from the start, but are there any recommendations to keep my webserver secure without buying hardware?

It looks like they succeeded in f'ing it up cuz the one of the volumes is corrupt now, luckily I have backup so no biggie cuz I needed to actually repartition it anyway.

___________________
Access Virus TI Polar, Moog Sub Phatty, Waldorf Pulse 2, Roland JP-8000, Technics 1210MK2's, NI Traktor Konyrol S4, Yamaha HS7's

Soundcloud | YouTube

LAMP?

___________________

quote:

Originally posted by bas Dual exhaust tips on dual exhaust = QUAD EXHAUST = 300 gain in horsepower. Duh

quote:

Originally posted by bas Undies with a dickhole aren't good for guys. Your balls can get caught in them. That's why I prefer to go over the gate instead of through the fence.

quote:

Originally posted by gehzumteufel LAMP?

Basically it's a VMware machine running Windows Server 2003 Web Edition w/ ISA 2000 and I'm using IIS for the website. Maybe that's my first mistake, I've never used Apache so I used IIS out of familiarity. I've never heard of LAMP but I just looked it up, is that available for Apache for Windows? Or should I seriously consider creating a Linux server instead, if I do that then I lose the ability to run BlackICE, etc on it though cuz I only have it for Windows.

___________________
Access Virus TI Polar, Moog Sub Phatty, Waldorf Pulse 2, Roland JP-8000, Technics 1210MK2's, NI Traktor Konyrol S4, Yamaha HS7's

Soundcloud | YouTube

quote:

Originally posted by Dj Dizzy Basically it's a VMware machine running Windows Server 2003 Web Edition w/ ISA 2000 and I'm using IIS for the website. Maybe that's my first mistake, I've never used Apache so I used IIS out of familiarity. I've never heard of LAMP but I just looked it up, is that available for Apache for Windows? Or should I seriously consider creating a Linux server instead, if I do that then I lose the ability to run BlackICE, etc on it though cuz I only have it for Windows.

blackICE as in the firewall app? no worries cause there are many other linux firewall apps available anyways.

iptables comes to mind.

___________________

quote:

Originally posted by bas Dual exhaust tips on dual exhaust = QUAD EXHAUST = 300 gain in horsepower. Duh

quote:

Originally posted by bas Undies with a dickhole aren't good for guys. Your balls can get caught in them. That's why I prefer to go over the gate instead of through the fence.

quote:

Originally posted by gehzumteufel blackICE as in the firewall app? no worries cause there are many other linux firewall apps available anyways. iptables comes to mind.

yeah I have BlackICE Server Protection 3.6 the firewall software but didn't think I would need it. Would it really be better for me to go LAMP like you suggested and run a Linux server with a Linux firewall or do you think it would be okay for me to keep Windows Server 2003 w/ ISA 2000 and load BlackICE and dump IIS for Apache.

___________________
Access Virus TI Polar, Moog Sub Phatty, Waldorf Pulse 2, Roland JP-8000, Technics 1210MK2's, NI Traktor Konyrol S4, Yamaha HS7's

Soundcloud | YouTube

quote:

Originally posted by Dj Dizzy yeah I have BlackICE Server Protection 3.6 the firewall software but didn't think I would need it. Would it really be better for me to go LAMP like you suggested and run a Linux server with a Linux firewall or do you think it would be okay for me to keep Windows Server 2003 w/ ISA 2000 and load BlackICE and dump IIS for Apache.

well from an ease of use angle its easier to just dump IIS and load apache. from a robustness angle LAMP will own the windows server. it will be able to handle more, utilize the resources better, and be less maintenance.

___________________

quote:

Originally posted by bas Dual exhaust tips on dual exhaust = QUAD EXHAUST = 300 gain in horsepower. Duh

quote:

Originally posted by bas Undies with a dickhole aren't good for guys. Your balls can get caught in them. That's why I prefer to go over the gate instead of through the fence.

so I brought it back up and wasn't so lazy about security this time around. i was also running an FTP along with the website through IIS on the same partition, I'm thinking the FTP is how the were able to go nuts on the server.

So I:
*partitioned the drive into 3 different volumes to keep everything segregated (one for the OS/apps, second for the website files, third for the ftp)
*dumped IIS altogether and now running Apache for the website and FileZilla for the FTP
*changed all pages from ASP to PHP with NoExec noted in Apache
*Still running ISA on Windows Server 2003 Web Edition

I think I should be good now but we'll see

___________________
Access Virus TI Polar, Moog Sub Phatty, Waldorf Pulse 2, Roland JP-8000, Technics 1210MK2's, NI Traktor Konyrol S4, Yamaha HS7's

Soundcloud | YouTube

find him and kill him. who needs a firewall when you have a gun

___________________

quote:

Originally posted by Halcyon+On+On OOKA-OOKA ME NACHOS ME PRESS KEYS ON COMPUTER GOOD

quote:

Originally posted by nchs09 find him and kill him. who needs a firewall when you have a gun

your pc

*clicks away*

quote:

Originally posted by Dj Dizzy so I brought it back up and wasn't so lazy about security this time around. i was also running an FTP along with the website through IIS on the same partition, I'm thinking the FTP is how the were able to go nuts on the server. So I: *partitioned the drive into 3 different volumes to keep everything segregated (one for the OS/apps, second for the website files, third for the ftp) *dumped IIS altogether and now running Apache for the website and FileZilla for the FTP *changed all pages from ASP to PHP with NoExec noted in Apache *Still running ISA on Windows Server 2003 Web Edition I think I should be good now but we'll see

well your chosen alternative is loads better. good luck!

___________________

quote:

Originally posted by bas Dual exhaust tips on dual exhaust = QUAD EXHAUST = 300 gain in horsepower. Duh

quote:

Originally posted by bas Undies with a dickhole aren't good for guys. Your balls can get caught in them. That's why I prefer to go over the gate instead of through the fence.

Haven't used IIS in a while , I must say Apache 2.2 looks really secure and doesn't take up much resources, your http.conf config files are really easy to edit. Also you can implement additional SSL Security in seconds, also you can restrict I.P Addresses or Ranges.

You could also use a different Server Port to try and hide your server better.

___________________

" You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip
through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us will-
ing pupils, but those few are like drops of water in the desert."

LAMP =
Linux
Apache
MySQL
PHP

Apache is available for Windows and is pretty solid.

Since you're running in a VM environment anyway, you could give Linux a try. I don't know if there's a similar thing to iptables in the Windows stack, but you could have it automatically add rules to iptables to block people that make a ridiculous amounts of attempts on whatever services you're running.

What exactly are you running on your webserver, anyway? I used to run one on my computer for development purposes, but it was compromised (through phpMyAdmin). I ended up just requiring a user/pass for the entire site, but I guess that still doesn't help with people trying to brute-force credentials.