getting an IIS7 server on Vista ultimate visible from the net...

I have a static IP and am running Vista Ultimate. I've installed IIS7 and
have no problem accessing it from my IE 7 browser as "localhost" or as my
workstation name and can ping it by IP number without a problem. I have made
ports 80, 20, 21 and 22 exceptions in my best to a Windows firewall.

What else do I have to set in order for the Web server to be accessible --
securely! -- from the Internet?

Thanks!

Ross

Re: getting an IIS7 server on Vista ultimate visible from the net...

On Jun 24, 4:06 pm, "Ross M. Greenberg"
wrote:
> I have a static IP and am running Vista Ultimate. I've installed IIS7 and
> have no problem accessing it from my IE 7 browser as "localhost" or as my
> workstation name and can ping it by IP number without a problem. I have made
> ports 80, 20, 21 and 22 exceptions in my best to a Windows firewall.
>
> What else do I have to set in order for the Web server to be accessible --
> securely! -- from the Internet?
>
> Thanks!
>
> Ross


Security is more than just open ports or "what else do I have to set".
It is an on-going evaluation to identify and respond to threats and
vulnerabilities.

Default IIS7 install is safe enough to open to the internet, but once
you add more components and applications, the vulnerabilities and
threats change, depending on the components and applications.

Your current system state is unclear, so security recommendations are
similarly unspecified.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Re: getting an IIS7 server on Vista ultimate visible from the net...

> Security is more than just open ports or "what else do I have to set".
> It is an on-going evaluation to identify and respond to threats and
> vulnerabilities.
>
> Default IIS7 install is safe enough to open to the internet, but once
> you add more components and applications, the vulnerabilities and
> threats change, depending on the components and applications.
>
> Your current system state is unclear, so security recommendations are
> similarly unspecified.
>


Thanks, David!

Right now the problem is even making a simple index.htm appear on the
internet! Even when turning the firewall entirely off, hitting
http:// generates an error! Something is turned off or not
enabled methinks..........

Re: getting an IIS7 server on Vista ultimate visible from the net...

On Jun 25, 3:32 am, "Ross M. Greenberg"
wrote:
> > Security is more than just open ports or "what else do I have to set".
> > It is an on-going evaluation to identify and respond to threats and
> > vulnerabilities.
>
> > Default IIS7 install is safe enough to open to the internet, but once
> > you add more components and applications, the vulnerabilities and
> > threats change, depending on the components and applications.
>
> > Your current system state is unclear, so security recommendations are
> > similarly unspecified.
>
> Thanks, David!
>
> Right now the problem is even making a simple index.htm appear on the
> internet! Even when turning the firewall entirely off, hitting
> http:// generates an error! Something is turned off or not
> enabled methinks..........


Since you said http://localhost works, the error is not really from an
IIS configuration issue since IIS does not care about "internal IP" vs
"external IP". You have to show that the rest of your networking is
configured to route requests to http:// to actually
reach and accepted by this machine's static IP address. And without
the firewall turned on, I think your problem is outside of Vista
itself.

What is the rest of your network routing configuration? Any wireless
router/firewall/NAT device involved? Does your Internet Service
Provider permit users to run servers and allow access to port 80?

Using "http://localhost" your traffic stays on your machine, but using
"http://" the traffic goes outside and tries to come
back in, at which point other networking configuration can affect it.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Re: getting an IIS7 server on Vista ultimate visible from the net...

Well, unbeknownst to me, my DSL modem has a firewall within it, whose
default configuration blocks incoming access to port 80, making it rather
difficult to communicate with the IIS webserver! :-)

Once I disabled that aspect of the firewall (the documentation for which
could easily fit between these two dots:.) I now have access to my never
been used before IIS server, albeit slower than I liked. Now to resolve
that problem...

So you were spot on David!

Thanks! Now I have to figure out why access to my never- before- used IIS
server is so danged slow!

While I figure that out, I'm just enjoying the smell of a new server! :-)

Thanks again!

Ross