Greenguy's Board - View Single Post - Is a firewall on a server an absolute necessity?

juggernaut · 2005-08-15, 09:27 PM

Well my 1st question to you is what OS is on the box? I run a windows 2003 with iis6 and I have to say MS got its shit together with that system. I have been running it now for about 6 months and no one has gotten in. Well at least I hope they have not. But seriously its not needed if you know what you are doing and are on top of that stuff every day. You cant just let stuff slip over a few days, you must read the IAVA reports every day. Cause when there is a problem you are dealing with millions of hackers all over the world scanning subnets for unpatched systems.
Personnally I would say pay for it. Hardware FW are so much better then SW, but you better hope the company knows what they are doing with it. $99 a month is not bad for a HW. I know companies charging that for SW FW. All you really need port 80, and 21 open if you are just going to be using it as a webserver. Everything else should really be closed. Your not running mail from it so those are the only two you really have to worry about. Can't shut off 80 as you wont get it to the web. 21 you can live with out but then how you going to put stuff to it? If it was in your house I would tell you to shut off 21 also.

2005-08-15, 09:27 PM	#3
juggernaut Registered User Join Date: Apr 2005 Location: Central Jersey! If I was rich and powerful I would dress as my avatar does. Posts: 1,448	Well my 1st question to you is what OS is on the box? I run a windows 2003 with iis6 and I have to say MS got its shit together with that system. I have been running it now for about 6 months and no one has gotten in. Well at least I hope they have not. But seriously its not needed if you know what you are doing and are on top of that stuff every day. You cant just let stuff slip over a few days, you must read the IAVA reports every day. Cause when there is a problem you are dealing with millions of hackers all over the world scanning subnets for unpatched systems. Personnally I would say pay for it. Hardware FW are so much better then SW, but you better hope the company knows what they are doing with it. $99 a month is not bad for a HW. I know companies charging that for SW FW. All you really need port 80, and 21 open if you are just going to be using it as a webserver. Everything else should really be closed. Your not running mail from it so those are the only two you really have to worry about. Can't shut off 80 as you wont get it to the web. 21 you can live with out but then how you going to put stuff to it? If it was in your house I would tell you to shut off 21 also.