Vulnerabilty hosting own site

Joop Siroop · 25.06.2004, 11:30

I was told that I have to protect my site. I have a wifi network behind a 3com gateway/router/firewall. On 1 pc I have Windows XP and appserv and mambo 4.5.

What is there to protect? How should I do it?
Thanx.

zorkhh · 25.06.2004, 12:17

Hi,

i think it's not really possible to do a SysAdmins-job over a forum. But for mambo-security there is a good tutorial on mambreport.de. I think, because in holland you can sing "Schade Deutschland, alles ist vorbei", you should understand a german tutorial

Greetings, Zork

Joop Siroop · 25.06.2004, 12:56

Ja, gesungen wird das schon hier

But is there a big security risk? A guy told me that my site is complete unprotected. Is that true?

zorkhh · 25.06.2004, 13:33

Hi,

i don't know, if YOUR site is totally unprotected. But this should be no mambo-specific problem. Of course, mambo-sites have been hacked in the last week, but there are security-patches and the mentioned doc.

As i said before: the security of your system / network architecture can not be checked by talking about it in a forum. If you are not sure, if there are security problems, contact a technician. Not only for the security of YOUR site/data/... . There are several nice tricks, where people can hijack your server and use it for spamming or (even worse) as FTP-server for porn or protected material.

BTW, why do you use an own server? Why not host at a professional company. That's not too expensive. Several threads here discuss hosters.

Greetings, Zork

(P.S.: we talk again after "you" met sweden

)

zorkhh · 25.06.2004, 13:45

Hi,

your friend is completely right!

Just take a look at your site...

You really should ask someone for help.

(sorry for that)

Zork

Joop Siroop · 25.06.2004, 13:47

Thanx for putting the first content online.

I would like to call you to ask you some small questions

Joop Siroop · 25.06.2004, 13:51

My site wasn't working until I moved the mambo directory (c:\appserv\www\mambo) to the www root.

Actually I didn't move it but copied it. Now that it's working I wanted to delete the c:\appserv\www\mambo directory.

But if I do that my site is offline.

How is that possible?

(I stopped my apache server, 4 guests online)

zorkhh · 25.06.2004, 13:58

Hi,

i sent you my phone number per email. But again, from "far away" i can only give some tips. To secure the system you'll have to be at the system.

BTW, my little "hack" was NO mambo-security-problem.

Zork

(Hey, did you switch off your computer?)