Dedicated Server Security and all that Jazz

BingoBalls · 07-13-2006, 04:59 AM

Hey hoping someone here can provide some info.

So my boss went ahead and purchased a dedicated server account with a host in the UK but the only thing is that its unmanaged and its being left to me to be the admin - this is a first for me

At the moment I have uploaded the current site, setup the DNS Names etc waiting for the propagation to complete.

My main concern is the security of the system so I am looking for any help guides that would provide good tips on keeping a server secure - its a Windows 2003 Server.

Cheers.

JuggoPop · 07-13-2006, 02:40 PM

**John Scott** · 07-13-2006, 02:46 PM

FishFreek is our server admin, and he does have a few tricks that add extra security. Probably should hire a guy.

JamieJelly · 07-13-2006, 02:58 PM

you can buy a book from Amazon, that would probably be a good start. Security is a big field, what are your main concerns?

enomlover · 07-14-2006, 01:53 AM

I would recommend you hiring a managment guy instead of bying books etc opps i think John already suggested

labrocca · 07-14-2006, 10:10 AM

Serverwizards.com ain't too bad..they have good reviews at WHT and are fairly priced imho

BingoBalls · 07-14-2006, 01:38 PM

Thanks for the replies folks I appreciate it.

There are two things about outsourcing the server management -

1: My boss wants everything in-house but also wants one of his current staff to look after it, which would be me.

2: I want to learn this anyway as its all experience in my view but what I dont want is to cock it up and causing a mess.

We already have an outsource IT guy who I had a chat with today and he seemed confident that our host will probably have security in place already but thats something I need to chat about with the hosting company - first thing Monday morning.

Thankfully the sites we are placing onto the server is doing really bad in the serps and we are getting very little business from it so I have some time to get up to scratch in trying to manage this thing.

Overall the server will be hosting two sites that use server side includes, no credit card details will be processed through the sites as our main site elsewhere takes care of that. Each site is approx 200 pages in sizes so nothing major.

I really think I need to know if I should be running MS security patches when they come out if so would it have any effect on the sites - do I run the updates at a specific time like when there is little traffic etc.

I am interested in buying the book as you suggested JamieJelly as again its all knowledge for me - do you know of any? I am thinking MS Server 2003 for Dummies

John those little security tricks are something I am interested in learning - if you could ask your guy if he has any good learning sites I would really appreciate it - just might throw a grean rep your way, lol.

Noodles · 08-15-2006, 07:57 PM

Some tips for keeping your box secure

- Keep uptodate with security and critical updates from microsoft
- Subscribe to security advisory alerts
- Shut down all services that you don't need
- Install a firewall if you can and only allow through ports that you need (e.g. 80 for web, 25 for smtp, 110 for pop3)

the_wanderer · 07-29-2007, 05:27 AM

I would recommend two things for ensuring the server is secure.

1. Knowledge, look into some basic hardening guides for Windows Server particularly those related to Internet Servers. Here is Microsoft's official guide for Windows 2003. There are plenty of other guides that google will reveal.

2. Vigilance, stay alert. Ensure your system is kept up to date (operating system and web applications) and check your server regularly with a vulnerability assessment tool or service. It wont solve all your security worries but is a valuable tool when it comes to staying secure.

the_wanderer · 07-29-2007, 05:31 AM

Well that's one way to revive an old thread. In the future I will pay more attention to the dates. I expect the thread starter is now a Windows2003 security guru.

Yes I am new here.

BingoBalls · 07-29-2007, 07:24 AM

Welcome Wanderer.

Funny that you revived this thread as I've now ended up working in a Data Centre for one of Ireland's largest hosts.

Always good to have those guides though, thanks for posting that one.

RSHosting · 07-30-2007, 12:55 AM

There are many server management companies why don't you hire one to takecare of your server.

**ToddW** · 07-30-2007, 03:19 PM

I use www.ServerMotion.com as "backup" when I go on vacation and host 1 of my personal sites on their 'shared' account so far no problem and great tech support system IMHO.