Re: Web Server behind ZoneAlarm?
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Web Server behind ZoneAlarm?

From: Brian Cryer <brianc@127.0.0.1.activesol.co.uk>
Date: Fri Nov 04 2005 - 12:45:13 CET

"Anthony" <amartin@whoever.com> wrote in message
news:1131049931.198562.95270@g49g2000cwa.googlegroups.com...
> Thanks to all who replied to my posting. I should clarify what I meant
> by "web server". I don't want to run a full-blown web server like IIS.
> All I want is to install a webcam software with an internal web server
> so that I can keep an eye on my home from work. In fact the web server
> will be password-protected. Given this information, do I still have to
> open port 80 in ZoneAlarm? And, if so, what risks are involved?
>
> thanks

The short answer is Yes.

The long answer you've already been given. Something I forgot about was the
number of security holes in IIS (Apache is better, but I'm sure it has its
own set of security holes). I've not played with password protecting IIS -
it must help.

-- 
Brian Cryer
www.cryer.co.uk/brian
Received on Mon Nov 21 02:39:15 2005