Tiscali / TalkTalk User

17monkeys · 15-03-2003, 04:48 PM

Hi all,

I was wondering if anyone has managed to get their website off their local machine visible from the net using f2s.com fixed IP?

Info: Using IIS and win2k pro, DLink 504 Router modem

The website itself is configure on the local lan IP... 192.168.0.X and I can browse it locally fine, but I'm having trouble with the NAT and port redirection so I can view it from the web.

Thanks for any help!

Neil · 15-03-2003, 04:52 PM

You will become a hackers dream!

I wouldnt really bother hosting on an ADSL connection.

Fair enough if your just tryingit out, but it really wouldnt be suitable for a busy site!

17monkeys · 15-03-2003, 06:48 PM

Yeah but if its all patched up its not so bad!...

Thing is i've got plenty of settings when i hook into my router, most of which i don't what to set to.

I know I can get this running, but will it run if i point a browser to an IP... eg 212.148..... I can do that for a virtual hosted domain (eg. microsoft.com > 207.46.134.222) , but can i do that for my IIS pages through my router IP outside of my lan..... ie: http://212.148....??

16-03-2003, 01:40 AM

You just need to forward port 80 on your router to the local IP address of your PC. I don't know anything about the dlink so I can't tell you exactly how to do that, it's probably in NAT settings or whatever they call it. Then just point a browser at http://<your static ip>.

Here is a website being hosted on an ADSL connection (through an EN5861 router).

I hope you're right about being patched up...

stephan · 16-03-2003, 10:52 AM

Hi,

It can be dodgy hosting your own website for several reasons.

IIS is very insecure, so is PWS. They do have patches available, but security holes are discovered all the time, and I don't think it's worth it.

To be honest, they have probably nearly all been found by now, but it was very insecure.

The other problem is people using up all your bandwidth! This could happen.

If you are using Windows, you should check all your ports. UDP ones included. There are lots of services that are enabled by default in Windows 2000/XP.

When you have setup your server, you should run this - http://www.gfi.com/lannetscan/

It will show all the vulnerabilities on it. You will be suprised how many there are!

My friend was using Linux, Apache and PHP behind a firewall/router. He thought he was secure, but no!

If you are going to get a router by the way, there are some with "intrusion detection", they can detect DoS attacks and blacklist the sources. I don't know if it works, but that's what I use.

The really mental thing to do is to use Windows and IIS/PWS without a firewall. If you aren't very very very careful, anyone can get in.

Just my thoughts!

Now, if anyone wants to have a go, this is my website, hosted on ADSL with F2S, behind a router. If you can hack it, let me know!

http://www.fishycam.com

p.s. the guestbook is off limits, don't try to hack that please, I'm sure it can be done!!

Neil · 16-03-2003, 12:19 PM

Ok, if i have your permission I might have a go at scanning it if thats ok with you.

Your IP is 195.137.41.179

You will no its me by my IP being from f2s

Not sure when I will get chance.

First time Ive attempted to scan an IIS server. :ninja:

stephan · 16-03-2003, 03:12 PM

Yeah, go for it!

I am not saying it is secure, I am not sure!

You have my permission though.

If you find anything, please do not cause any permenant damage, just let me know!

It doesn't run IIS by the way

17monkeys · 16-03-2003, 03:55 PM

Thanks guys for the help!! much appreciated..... :-)

I had it working after all on IIS just I couldn't get to the website through the http://IPaddress but I could access it from a mate's machine.

Now to try and get SMTP & Frontpage extensions working, and then buy a domain name to test it out on!

Neil · 16-03-2003, 05:43 PM

What you running on it then?

17monkeys · 16-03-2003, 06:49 PM

I was running it on Win2K pro with IIS, initially i used tzo.com prog. to check that port 80 was clear... I'm now putting on 2k server and then i'm gonna patch it up and test it out, clear up as many holes as possible!

I tend to stick with MS stuff as much as possible... its generally pain free and does what it says on the box!

stephan · 16-03-2003, 07:19 PM

The server is Omnihttpd and the image server (port 8080) is Webcam 2000

www.omnicron.ca and http://www.stratoware.com/webcam2000/

17monkeys, you are right, Microsoft stuff normally does work, but you need to make sure you keep your software up to date, windowsupdate.microsoft.com

Having said that, all webservers need to be kept up to date, it's very important.

17-03-2003, 01:02 PM

Ok - my next questions.... I like to keep you guys busy!

How would I run multiple domains off my server.... so www.web1.com points to a folder1 and www.web2.com points to folder2.... all in IIS?

Better still... I've installed Frontpage Extensions and can't get the damn thing to work on a standard simple email form... is there anything 'special' that needs setting up to get the thing working. I've upgraded the site to the extensions yet no joy.

Last question! Why can't I view my website after I've stopped the Default Web Site in IIS even though it's a site listed on its own (ie not under default)?

17monkeys · 18-03-2003, 04:05 PM

Just a short update for anyone who's interested....

I removed IIS and reinstalled and I was able to stop the default web site and still view the new web site.... I did make certain that it points to the IP in the properties (dunno if this makes a difference) but it works.

Frontpage extensions now work! I had to connect to the server from outside of the router and create a page with a form. Saved it live and tested and its all ok.

I've been told my hosts files can sort out the multiple domains but i dont know how accurate info that is.....

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Freedom2Support Website Changes 25th February 2004	Justin	Website Comments, Suggestions & News	3	04-03-2004 12:03 PM

Tiscali / TalkTalk User

Advertisement

TalkTalk User Links

TalkTalkUser Partners

15-03-2003, 04:48 PM	#1
17monkeys Tiscali User Member Join Date: Mar 2003 Posts: 26 Thanks: 0 Thanked 0 Times in 0 Posts	Hi all, I was wondering if anyone has managed to get their website off their local machine visible from the net using f2s.com fixed IP? Info: Using IIS and win2k pro, DLink 504 Router modem The website itself is configure on the local lan IP... 192.168.0.X and I can browse it locally fine, but I'm having trouble with the NAT and port redirection so I can view it from the web. Thanks for any help!

15-03-2003, 04:52 PM	#2
Neil Tiscali User Member Join Date: May 2002 Posts: 61 Thanks: 0 Thanked 0 Times in 0 Posts	You will become a hackers dream! I wouldnt really bother hosting on an ADSL connection. Fair enough if your just tryingit out, but it really wouldnt be suitable for a busy site!

15-03-2003, 06:48 PM	#3
17monkeys Tiscali User Member Join Date: Mar 2003 Posts: 26 Thanks: 0 Thanked 0 Times in 0 Posts	Yeah but if its all patched up its not so bad!... Thing is i've got plenty of settings when i hook into my router, most of which i don't what to set to. I know I can get this running, but will it run if i point a browser to an IP... eg 212.148..... I can do that for a virtual hosted domain (eg. microsoft.com > 207.46.134.222) , but can i do that for my IIS pages through my router IP outside of my lan..... ie: http://212.148....??

16-03-2003, 01:40 AM	#4
Guest Guest Posts: n/a	You just need to forward port 80 on your router to the local IP address of your PC. I don't know anything about the dlink so I can't tell you exactly how to do that, it's probably in NAT settings or whatever they call it. Then just point a browser at http://<your static ip>. Here is a website being hosted on an ADSL connection (through an EN5861 router). I hope you're right about being patched up...

16-03-2003, 10:52 AM	#5
stephan Tiscali User Member Join Date: Jan 2003 Posts: 67 Thanks: 0 Thanked 0 Times in 0 Posts	Hi, It can be dodgy hosting your own website for several reasons. IIS is very insecure, so is PWS. They do have patches available, but security holes are discovered all the time, and I don't think it's worth it. To be honest, they have probably nearly all been found by now, but it was very insecure. The other problem is people using up all your bandwidth! This could happen. If you are using Windows, you should check all your ports. UDP ones included. There are lots of services that are enabled by default in Windows 2000/XP. When you have setup your server, you should run this - http://www.gfi.com/lannetscan/ It will show all the vulnerabilities on it. You will be suprised how many there are! My friend was using Linux, Apache and PHP behind a firewall/router. He thought he was secure, but no! If you are going to get a router by the way, there are some with "intrusion detection", they can detect DoS attacks and blacklist the sources. I don't know if it works, but that's what I use. The really mental thing to do is to use Windows and IIS/PWS without a firewall. If you aren't very very very careful, anyone can get in. Just my thoughts! Now, if anyone wants to have a go, this is my website, hosted on ADSL with F2S, behind a router. If you can hack it, let me know! http://www.fishycam.com p.s. the guestbook is off limits, don't try to hack that please, I'm sure it can be done!!

16-03-2003, 12:19 PM	#6
Neil Tiscali User Member Join Date: May 2002 Posts: 61 Thanks: 0 Thanked 0 Times in 0 Posts	Ok, if i have your permission I might have a go at scanning it if thats ok with you. Your IP is 195.137.41.179 You will no its me by my IP being from f2s Not sure when I will get chance. First time Ive attempted to scan an IIS server. :ninja:

16-03-2003, 03:12 PM	#7
stephan Tiscali User Member Join Date: Jan 2003 Posts: 67 Thanks: 0 Thanked 0 Times in 0 Posts	Yeah, go for it! I am not saying it is secure, I am not sure! You have my permission though. If you find anything, please do not cause any permenant damage, just let me know! It doesn't run IIS by the way

16-03-2003, 03:55 PM	#8
17monkeys Tiscali User Member Join Date: Mar 2003 Posts: 26 Thanks: 0 Thanked 0 Times in 0 Posts	Thanks guys for the help!! much appreciated..... :-) I had it working after all on IIS just I couldn't get to the website through the http://IPaddress but I could access it from a mate's machine. Now to try and get SMTP & Frontpage extensions working, and then buy a domain name to test it out on!

16-03-2003, 05:43 PM	#9
Neil Tiscali User Member Join Date: May 2002 Posts: 61 Thanks: 0 Thanked 0 Times in 0 Posts	What you running on it then?

16-03-2003, 06:49 PM	#10
17monkeys Tiscali User Member Join Date: Mar 2003 Posts: 26 Thanks: 0 Thanked 0 Times in 0 Posts	I was running it on Win2K pro with IIS, initially i used tzo.com prog. to check that port 80 was clear... I'm now putting on 2k server and then i'm gonna patch it up and test it out, clear up as many holes as possible! I tend to stick with MS stuff as much as possible... its generally pain free and does what it says on the box!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

16-03-2003, 07:19 PM	#11
stephan Tiscali User Member Join Date: Jan 2003 Posts: 67 Thanks: 0 Thanked 0 Times in 0 Posts	The server is Omnihttpd and the image server (port 8080) is Webcam 2000 www.omnicron.ca and http://www.stratoware.com/webcam2000/ 17monkeys, you are right, Microsoft stuff normally does work, but you need to make sure you keep your software up to date, windowsupdate.microsoft.com Having said that, all webservers need to be kept up to date, it's very important.

17-03-2003, 01:02 PM	#12
Guest_17monkeys Guest Posts: n/a	Ok - my next questions.... I like to keep you guys busy! How would I run multiple domains off my server.... so www.web1.com points to a folder1 and www.web2.com points to folder2.... all in IIS? Better still... I've installed Frontpage Extensions and can't get the damn thing to work on a standard simple email form... is there anything 'special' that needs setting up to get the thing working. I've upgraded the site to the extensions yet no joy. Last question! Why can't I view my website after I've stopped the Default Web Site in IIS even though it's a site listed on its own (ie not under default)?

18-03-2003, 04:05 PM	#13
17monkeys Tiscali User Member Join Date: Mar 2003 Posts: 26 Thanks: 0 Thanked 0 Times in 0 Posts	Just a short update for anyone who's interested.... I removed IIS and reinstalled and I was able to stop the default web site and still view the new web site.... I did make certain that it points to the IP in the properties (dunno if this makes a difference) but it works. Frontpage extensions now work! I had to connect to the server from outside of the router and create a page with a form. Saved it live and tested and its all ok. I've been told my hosts files can sort out the multiple domains but i dont know how accurate info that is.....