[IIS] IIS Literacy (ii)

Iis-iis Web Server Setup

The first IIS Web server

First, set up a Web site

For example, the IP address of the machine is 192.168.0.1, their own web page in the D:\Wy directory, the homepage of the page file name is index.htm, now want to build their own Web server based on these.

For this web site, we can use the existing "Default Web site" to make the appropriate changes, it can be easily implemented. Please click on "Default Web Site" and select "Properties" to enter the "Default Web Site Properties" setting interface.

1. Modify the IP address of the binding: Go to the Web Site window and select the native IP address "192.168.0.1" in the drop-down menu after "IP address".

2. Modify the home directory: Go to the Home directory window, and then enter (or select with the browse button) the "D:\Wy" directory where your page is located in the "Local path".

3. Add home file name: Go to the document window, then press the Add button, follow the prompts in the "default document name" After you enter the first page of your own webpage filename "index.htm".

4. Add a virtual directory: for example, your home directory under "D:\Wy", and you want to enter "192.168.0.1/test" format can be called "E:\All" in the page file, which "test" is a virtual directory. Right-click on the "Default Web Site", select "new → virtual directory", enter "test" at "Alias", then "E:\All" at "directory" and then follow the instructions to add success.

5. Effect test: Open IE Browser, enter "192.168.0.1" in the Address bar and then press ENTER, at this time you can call up the homepage of your own page, then the setting is successful!

Note: Different computers will have different option names, but in general they can be found (try again).

Second, add more Web sites

1. Multiple IPs for multiple Web sites

If the machine is already bound to multiple IP addresses and want to use different IP addresses to derive different Web pages, simply right-click on the "Default Web Site", select "New → site", and then follow the prompts to enter any content that describes it (for example, "My second Web site"), and Enter the IP address used by the Web site "drop-down menu where you want to bind it, and then follow the steps to set it up after you've set up this web site."

2. One IP address for multiple Web sites

When you follow the steps to establish all the Web site, for the virtual host, you can set a different port number for each Web site to achieve, such as to a Web site set to 80, a set of 81, a set of 82 ..., for the port number is 80 of the Web site, The access format is still directly IP address, and for Web sites bound to other port numbers, access must be followed by the corresponding port number after the IP address, that is, the format "http://192.168.0.1:81" is used.

Obviously, it's a bit cumbersome to use after changing the port number. If you have already mapped all the domain names you need in your DNS server to this unique IP address, you can use a different "host header name" method, which allows you to use domain names directly to complete access to different Web sites.

For example, you have only one IP address of 192.168.0.1, you have established (or set up) two Web sites, one is "Default Web site", one is "My second Web site", now you want to enter "Www.enanshan." COM "Can directly access the former, enter" Www.popunet. COM "has direct access to the latter. The procedure is as follows:

(1) Make sure that your two domain names have been mapped to that IP address in the DNS server first, and that the port number of all Web sites remains at 80 this default value.

(2) then select "Default Web site → right click → properties →web Site", click the "Advanced" button to the right of "IP address", double click the existing IP address under "Multiple identities for this site" (or click to select it and then press the Edit button), and then under Host header names, enter the Www.enanshan. com and press the OK button to save the exit.

(3) Then follow the same method for "My second Web site" to set a new host header named "Www.popunet.c o M".

(4) Finally, open your Internet Explorer, enter a different URL in the address bar, you can bring up the content of different Web sites.

3. Multiple domain names correspond to the same Web site

You only need to bind an IP address to the Web site, and then in the DNS server, all the required domain names are mapped to your IP address, then you enter any domain name in the browser, will directly get the content of the site that is set up.

Security issues to be aware of when building an IIS server

Installation system patches for the 1.iis security settings. This is especially important for servers, because security patches are related to system security, and the Microsoft Web site frequently publishes the latest system security patches that can be updated at any time using the system's own Windows Update program.

2.iis security settings of the FTP directory setting. FTP directories are not set up and can be easily attacked by others, usually by assigning a home directory to a logical disk. For security, to set different access rights for each directory by different users, and then close some unwanted services, this can be a first level protection against undesirable persons exploiting IIS overflow vulnerability access to the system disk.

Port settings for the 3.iis security settings. IIS has the default port settings, as long as the computer knowledge of the people will remember these ports, to crack is very convenient, so try not to use 21 this default port number, and enable the log, so that the FTP service occurs when the exception check.

IIS-Remote administration of IIS services

Remote administration of the IIS service

1. Right-click on "Manage Web Site", select "Properties", then go to "Web site" window and choose "IP Address".

2. Go to the Directory Security window, click the Edit button under IP address and domain name restrictions, and select grant access to accept that the client manages IIS from outside the local computer, and then click the OK button.

3. After entering the format of "http://192.168.0.1:3598" (3598 for its port number) in the browser of any computer, a Password Inquiry window will appear, enter the Administrator account name (Administrator) and the corresponding password to log in successfully. IIS can now be remotely managed in the browser! The areas that can be managed here include new, modified, start, stop, and delete operations for Web sites and FTP sites.

IIS-Frequently asked questions about IIS

[IIS] IIS Literacy (ii)