RE: Webservers - IIS, etc.

["Schenck, Don" <Don.Schenck@xxxxxxxxxx>]

Folks --

I am NOT arguing that NT is extremely secure. I do not believe it is Swiss
cheese, either. It requires expertise.

Given my druthers, we'd all be using whatever-400's for the back office
server and be using Macintosh as our clients.

Ah well ... I can dream ...

-- Don Schenck
   Schenck Technical Consulting
   DonS@SchenckTech.com / www.SchenckTech.com 

> -----Original Message-----
> From: Scott Klement [mailto:klemscot@klements.com]
> Sent: January 15, 2001 12:55 PM
> To: MIDRANGE-L@midrange.com
> Subject: Re: Webservers - IIS, etc.
> 
> 
> 
> 
> On Sat, 13 Jan 2001, nina jones wrote:
> 
> > > 
> > > Good question.  I'm playing around with it now.  Of 
> course, I don't have the
> > > knowledge to compare it to the Unix version.  I'm kind of 
> excited to start
> > > really using it.....If I'm betting there will be 
> somethings better and
> > > somethings worse............
> > > 
> > 
> > we use iis because with the asna web serving software it's a
> > requirement. i thought it was easy to set up and it does seem to run
> > ok.  the as/400 is a database server, so direct access to 
> the internet
> > is not on the as/400.  i don't have anything else on the 
> serving p/c,
> > because i don't trust microsoft security at all.
> > 
> > nj
> 
> Agreed...  Microsoft security is not to be trusted.   So the 
> next question
> is, once a hacker has full control of your NT box (the one 
> running IIS)
> what can they use that box to access on the rest of your LAN?
> 
> Is there a firewall between the IIS machine and the AS/400?  
> Will it stop
> attacks originating from the IIS machine?
> 
> 
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---