iB::Topic::Running a DSL webserver

	Damn Small Linux :: Damn Small Linux Board The DSL Forums

» Welcome Guest
[ Log In :: Register ]

Damn Small Linux Board » Damn Small Linux » Networking » Running a DSL webserver

		Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
		Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic

Pages: (5) </ [1] 2 3 4 5 >/

[ Track this topic :: Email this topic :: Print this topic ]

Topic: Running a DSL webserver, What is the best way?

< Next Oldest | Next Newest >

libretto

Group: Members
Posts: 336
Joined: Oct. 2003

Posted: July 03 2004,15:36

Hi all,

Just wanted some tips/advice on setting up my own webserver, which of course will be running DSL :;):

Has anyone actually used the Monkey webserver to run a proper website?

I was hoping to get a router then hook stuff up as follows:

Cable modem->Router->Webserver and other netowrked machines

Would this setup be secure enough, or would it be best to physically seperate my webserver from all the other machines of the network? ie put the webserver with a switch before the router and install some firewall software on it

Any help appreciated.

Cheers to all for an excellent distro :cool:

--------------
Small Radio, Small Laptop, DSL Linux

ke4nt1

Group: Members
Posts: 2329
Joined: Oct. 2003

Posted: July 03 2004,16:54

I would certainly be using some type of firewall now anyway.
Most cable modem/dsl/routers aren't the best at firewalling.

I wouldn't DARE put a server on your internal net..
Once a person is past your cable/router, and onto your
side of your network, danger lurks.....
BEWARE! ...you have been warned!...

Using a package like Astaro ,Freesco, Shorewall, etc. on an
old boatanchor or atticware box is more usable for what you are
trying to do... Most all of these packages allow you to use a nic
for your cable-modem, another nic for your internal net,
and a third for your DMZ boxes.. ( server )

You'll have much more control over open ports, nat, logs,
and can install additional software to make even more fun
reports and scans from incoming pings and scans.
Most are accessible thru a webmin-type interface, so
your DSL browser would be a great "admin" box.

I've only played with monkey a little...
Someone else here can give you more details on that gem.

With roberts new PHP extension,
you ought to be able to do quite a bit with it..

73
ke4nt

cbagger01

Group: Members
Posts: 4264
Joined: Oct. 2003

Posted: July 04 2004,01:28

If you have a decent home networking router like my Linksys WRT54G (which runs on an embedded Linux OS from a flash drive inside the box), you should have the flexibility to lock down your ports so that you either:

Only allow inbound connections of any type to the web server computer and not the rest of your PCs. This puts your web server PC in the "DMZ" while the rest of your computers are behind the firewall. You will then need to install an iptables-based software firewall or similar program on your web server PC.

Or you can keep all of your computers behind the firewall and only allow incoming port 80 connections (HTTP) and deny all others. You will then route all of this traffic to one specific computer in your home LAN, which will be your web server computer. This is called a "virtual server port", and is also known as port forwarding. You will need to give your web server a static IP address so that the router will know where to find your web server whenever a new HTTP request arrives.

Good Luck.

libretto

Group: Members
Posts: 336
Joined: Oct. 2003

Posted: July 04 2004,09:46

I don't really have the room for another full size PC, the webserver is going to be my miniPC :;):

I think the port forwarding would be the easiest method so I can allow incoming HTTP and SSH to the webserver. But still allow ports for programs like MSN messenger to get in/out for the other PCs of the network inc mine.

Was looking to get the Linksys BEFW11S4-UK Wireless Router (unfortunately can't trail leads across the house, so will need to get a USB wifi adapter for my PC)

--------------
Small Radio, Small Laptop, DSL Linux

cbagger01

Group: Members
Posts: 4264
Joined: Oct. 2003

Posted: July 04 2004,16:38

Make sure that you get a wifi USB adapter that is supported by Linux.

Knoppix supports many of them, and DSL supports most of the knoppix ones (DSL is based on knoppix version 3.3)

google is your friend. Also there is a thread in this discussion forum that lists wireless cards that work with DSL. Check it out.

24 replies since July 03 2004,15:36

< Next Oldest | Next Newest >

[ Track this topic :: Email this topic :: Print this topic ]

Pages: (5) </ [1] 2 3 4 5 >/

Damn Small Linux Board » Damn Small Linux » Networking » Running a DSL webserver