<DisplayPage
>
<title
>
web servers
</title>
<Content
Heading="Web Server resources">
Since I look after both Apache and IIS web servrs I regularly need to look up various information about them, and thats what this page is for.
</Content>
<SiteList
title="
Server Vulnerability Lists"
CreatedTmSt="
21-Sep-2001 20:13:46"
><SITE href="http://www.securityfocus.com/" title="SecurityFocus.com (MUST SEE SITE)">SecurityFocus is the a comprehensive and source of security information on the Internet. They provide a vendor-neutral, objective, timely and comprehensive security information to all members of the security community.</SITE>
<SITE href="http://www.securityfocus.com/infocus/1768" title="SNORT and regex ">Artcile explaining how SNORT (an OpenSource security tool detects SQL Injections and Cross Site Scriipting attacks.</SITE>
<SITE href="http://www.owasp.org/" title="Open Web Application Security Project">The Open Web Application Security Project (OWASP) is dedicated to helping organizations understand and improve the security of their web applications and web services. Imprtant reading for all web developers.</SITE>
<SITE href="http://www.cert.org/" title="CERT® Coordination Center">The CERT Coordination Center (CERT/CC) is a center of Internet security expertise, located at the Software Engineering Institute, a federally funded research and development center operated by Carnegie Mellon University.</SITE>
<SITE href="http://www.cve.mitre.org/" title="Common Vulnerabilities and Exposures (CVE) ">A list of standardized names for vulnerabilities and other information security exposures â?" CVE aims to standardize the names for all publicly known vulnerabilities and security exposures.</SITE>
<SITE href="http://www.apacheweek.com/features/security-13" title="Overview of security vulnerabilities in Apache httpd 1.3">Brief list of the security vulnerabilities found during the lifecycle of Apache 1.3.</SITE>
<SITE href="http://www.apacheweek.com/features/security-20" title="Overview of security vulnerabilities in Apache httpd 2.0">Brief list of the security vulnerabilities found during the lifecycle of Apache 2.0.</SITE>
<SITE href="http://www.wittys.com/textfiles.html" title="Hacking resources">Brain Candy for hacking sites.</SITE>
<SITE href="http://www.sitepoint.com/article/914" title="How to SpamProof your site">Article aimed at webmasters on how to reduce the amount of junk mail they receive. Essential reading for all those who have to place their contact details on a publicly available website.</SITE>
</SiteList>
<SiteList
title="
Apache Resources"
CreatedTmSt="
21-Sep-2001 20:13:46"
><SITE href="http://httpd.apache.org/" title="The Apache Project Home Page">Home page for Apache web server, which is an open-source HTTP server for modern operating systems including UNIX and Windows NT. </SITE>
<SITE href="http://www.apache.org/" title="Apache Software Foundation">Home page for Apache - they provide support for the Apache community of open-source software projects. </SITE>
<SITE href="http://www.apacheweek.com" title="Apache Week">Apache Week aims to become an essential resource for anyone running an Apache server, or anyone responsible for running Apache-based services. it inlcudes regular updates on Apache, lists of new or suspects bugs, press links plus longer specialised articles.</SITE>
<SITE href="http://www.backhand.org/mod_backhand/" title="mod_backhand">Fantastic load balancing/proxying module for apache. </SITE>
<SITE href="http://modules.apache.org/" title="Apache Modules">List of Apache modules</SITE>
<SITE href="http://httpd.apache.org/dev/apidoc/index.html" title="Apache API">Official attempts to provide definitive documentation for the Apache Web server API for version 1.3... but as they say themselves, it does not yet live up to that intention. Still under construction and Apache 2.0 is out, so it mey never be finished.</SITE>
<SITE href="http://apache.dev.wapme.net/doxygen-1.3/main.html" title="Apache 1.3 CVS Documentation"/>
<SITE href="http://apache.dev.wapme.net/doxygen-2.0/main.html" title="Apache 2.0 CVS Documentation"/>
<SITE href="http://javascriptkit.com/howto/htaccess.shtml" title="Comprehensive guide to .htaccess">I am sure that most of you have heard of htaccess, if just vaguely, and that you may think you have a fair idea of what can be done with an htaccess file. You are more than likely mistaken about that, however. Regardless, even if you have never heard of htaccess and what it can do for you, the intention of this tutorial is to get you two moving along nicely together.</SITE>
<SITE href="http://www.modssl.org/" title="mod_ssl .org">The mod_ssl project provides strong cryptography for the Apache 1.3 webserver via the Secure Sockets Layer. This site is the home of the project and provides doucmentation and examples to get SSL running on Apache.</SITE>
<SITE href="http://www.securityfocus.com/guest/24043" title="The Rise of the Spammers">Excellent detailed article about how a spammer got control of this guys Apache machine through a small vulnerability in PHP. Required reading for any serious web developer. </SITE>
</SiteList>
<SiteList
title="
IIS links"
CreatedTmSt="
21-Sep-2001 20:13:46"
><SITE href="http://blogs.msdn.com/ramesh_r/archive/2004/03/24/95109.aspx" title="CreateWebSite using WMI">Blog that shows how to use WMI to Create a Website</SITE>
<SITE href="http://www.microsoft.com/technet/scriptcenter/scripts/iis/iis6/web/default.mspx" title="IIS 6.0 Admin Scripts">MSDN scritps for administering IIS 6.0 using WMI.</SITE>
<SITE href="http://orcsweb.com/articles/iis_compression_6.0.aspx" title="Enabling compression on IIS6">Excellent article about how to enable compression in IIS6. </SITE>
<SITE href="http://www.securityfocus.com/guest/16819" title="Ten things to do with IIS">Another excellent SecurityFocus - this time about IIS and how to make it work better. Reuired reading for any IIS administrator.</SITE>
<SITE href="http://www.iisfaq.com/default.aspx" title="IIS FAQ">Fantastic resources for all thing IIS related, including ADSI scripts, DNS FAQs, and many more of those things you can never figure out about IIS.</SITE>
<SITE href="http://www.15seconds.com/focus/IIS%205.0.htm" title="IIS 5.0 at 15 Seconds">As always, 15 seconds has a great list of articles tips and tricks for both IIS 4.0 and 5.0. (well they always have great resources for Microsoft products.)</SITE>
<SITE href="http://www.aspfree.com/adsi/scriptmappings.asp" title="Remove dud mappings">This script removes un-needed script mappings on an IIS 5.0 web server. Read the warnings before using this (and back up your Metabase!)</SITE>
<SITE href="
http://www.iis-resources.com/modules/news/"
title="
IIS Resources"
>Excellent site for simple tips and tricks to do with IIS. All the articles I've read have been short and not too deep. This site is a <b>must see</b>
for anyone new to IIS administration, and also recommended for those whove been dealing with IIS for a while.</SITE> <SITE href="http://www.iis-resources.com/modules/freecontent/index.php?id=2" title="Securing IIS 4.0">Excellent list of how to secure IIS 4.0 at IIS-Resources.com - they say an IIS 5 one will be up shortly.</SITE>
<SITE href="http://www.skybuilders.com/users/jesse/docs/securityPolicy.html" title="skyBuilders Security Policy ">Simple explanation of lots of IIS security issues, in plain english. Recommended reading for any IIS administrator.</SITE>
<SITE href="http://www.pipeboost.com/default.asp" title="PipeBoost">PipeBoost is an ISAPI Filter that compresses pages using the zlib algorithm.</SITE>
<SITE href="http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B301386%233" title="MetaEdit">Metabase editing tool from MS.</SITE>
<SITE href="http://www.15seconds.com/issue/020314.htm" title="Web Site Compression ">IIS allows you to compress static pages, dynamic pages, or both. The compression option is turned off by default. To turn it on follow these instructions...</SITE>
</SiteList>
<SiteList
title="
Other webservers"
><SITE href="http://www.linuxdevices.com/articles/AT7186701822.html" title="NetMedia's RJ-45 WebServer">This is a web server that fits onto a RJ-45 connector. Seriously. Also accepts real time data updates via a serial port. (Its designed for embedded controllers.)</SITE>
<SITE href="http://www.siteplayer.com/DOCS/web_enable_doc.htm" title="Web Enabling Your Products Without Writing Any TCP/IP Code">This explains how to dynamically update the data on a NetMedia Siteplayer webserver. (Thats the web server that fits onto a RJ-45 connector.)</SITE>
</SiteList>
</DisplayPage>