Wtf? Hack Attempt?

[browser]

I meant for HFS. sorry i wasn't clearer

[fkdup74]

to my knowledge there isnt a way to password protect HFS,
unless you know a way to do it in html editing, if thats possible
me, i'm still a noob at HFS and havent a clue about html
what i do know is the attacks last night all got a 404 error,
and my pc's still runnin, so i assume they failed, w/o password protection
but like was mentioned a few posts ago, i imagine if someone
with the resources/knowledge applied themselves, they'd get in
w/ or w/o passwords

balaam and shn know more about this, so i'm gonna look into the IIS

just had a closer look at the proggie, nothing about passwords, but you
you can ban ip's (same thing as a firewall it seems to me)

[browser]

HFS-menu, other settings, users, add.
Right click on folder, set access for user.

At least that's what I'm doing, hoping to stay safe.

[trillscout]

Don't laugh but what does HFS and IIS
stand for seriously though.

[Spicker]

i got the same messages today!!!! from the log of HSF!!!!!!!!!

but all were 404 errors!

[fkdup74]

Originally posted by trillscout@18 December 2003 - 18:14
Don't laugh but what does HFS and IIS
stand for    seriously though.

HFS = HTTP File Server
IIS = ask balaam or shn

@ jai, the 404 means they werent served, couldnt connect
(ever see that error when you was browsing?)
but keep a record of those ip's and enter em in your firewall blocklist
thats what i'm doing for now, at least

[balamm]

Originally posted by trillscout@18 December 2003 - 19:14
Don't laugh but what does HFS and IIS
stand for seriously though.

IIS= Internet Information Services

It's on almost every windows disk. Just put the disk in and go to add/remove programs.

You'll have to configure access for it in your firewall but better yet, use a server firewall and AV.

Don't try installing SMTP or NNTP until you know a bit more about it.

Make sure you do some research on IIS before you start it up. Learn how to "harden" your OS to prevent hacks.

You'll probably want front page installed as well. It will create the sites for you with the vti-bin and other folders you'll need.

Sharepoint is a bonus, You can set up team sites, forums, asp, etc.

Grab a domain redirect from DYNdns (search google) so you don't have to show your IP.

Just do the research and you'll have a good lightweight server.

[fkdup74]

thanks balaam for the info, gonna see if its on my system
(got an OEM install of windows xp home)
already got an account with dyndns

[4play]

I still prefer apache, then again i would only ever use it on windows for local testing not as an actual server for the world to see.

me prefers linux/bsd and apache by far.

[fkdup74]

well, according to the microsoft site, IIS and xp home dont mix

from microsoft's site:

Q. Is it possible to install either IIS or PWS in Microsoft Windows XP Home Edition?
 
A. Windows XP Home Edition does not support any version of IIS and cannot be made to run IIS by any reliable method. Windows XP Home Edition was not designed to be a development platform for Web-based applications. Upgrading to Windows XP Professional will allow you to install IIS 5.1 on your system so you can develop with ASP.Net. IIS 5.1 on Windows XP Professional is a full-featured and capable Web server, but is limited to 10 simultaneous connections since it is a workstation operating system and not a server platform. There are also a few other limitations consistent with Windows XP Professional being used as a client operating system and not a server operating system. By and large, these are the same differences you find in IIS 5.0 on Windows 2000 Professional, and Windows 2000 Server or Advanced Server. Nevertheless, Windows XP Professional is an excellent environment for developing Web-based applications with the .NET Framework.