Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a home LAN with 5 computers and a NAS, all connected to a Linksys router which is connected to my Cox cable modem.

I'm interested in having one of my computers run an IIS-based web site and to have it be accessible to the internet with a static IP. However, I do not want o jeapordize the safety of the other computers on my home network!

Is there anyway to do this safely, or as safe as possible? I may also like to run an FTP server from this computer. Finally, optionally I would like to allow remote access to this computer from the internet--but it seems to me that that may increase the security risk to the other computers substantially.

share|improve this question

closed as off topic by Sam Jan 19 '12 at 11:32

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
nothing is secure if it has an ip address, but you need to weigh risks vs rewards! Your risks are low(er) since your not a target rich environment, as in nobody is going to put a concerted effort to to hack you, with mostly just basic firewall stuff and don't use the server to surf the web you should be safe. I'm not sure of the rewards in your case! –  tony roth May 27 '10 at 20:38

2 Answers 2

up vote 3 down vote accepted
  • Keep your router software updated
  • Configure the server with a static IP
  • Configure the router to only require the bare minimum ports
  • Only enable the bare minimum services on IIS and the server
  • Enable the Windows firewall and configure port access to only the required services.
  • For Remote Control use the free version of LogMeIn
  • Keep Windows and all Applications updated on patches and Anti-Virus
  • Only use IIS 6 or later (Windows XP/Windows 2003 or later)
  • Use very long and complex passwords for all accounts on the server and the router
  • Keep your web Application software updated. Software like WordPress is a big target.
share|improve this answer
2  
Consider adding another firewall between the PC and keeping it on a separate LAN. This is just in case it becomes infected it will not have direct access to the other PCs in the house to spread. –  Chris Nava May 27 '10 at 21:51
    
Thanks for the insights, is LogMein better to use than Microsoft RDS (Remote Desktop Services)? –  Alchemical May 28 '10 at 1:29
    
LogMeIn just allows you to easily and securely configure access to the server without opening your firewall. You install LogMeIn's client and it maintains a connection to their servers which you can then gain access through the website. Try both and see what you prefer. –  citadelgrad May 28 '10 at 1:34

just pop the pc you want to act as your server in your DMZ. this is configured through your router.

share|improve this answer
    
and make sure you use a strong pw for the router! –  tony roth May 27 '10 at 20:51
    
The DMZ is essentially running without a firewall. I suggest using port forwarding instead to reduce risk. –  Chris Nava May 27 '10 at 21:52

Not the answer you're looking for? Browse other questions tagged or ask your own question.