Hosting Site ON PC

[planetsim]

A mate of Mine is wanting to host a site we are making. Ive heard its possible if you have Broadband you can host your site.

Now is there any sites that show what you must have for security i know you'd need a firewall, Apache would need to be secured.

I could probably tell him but i think its better if theres a site that he can referer to if im not much help.

[jonathen]

The following url will not cover security, but is a download of an all-in-one server for Windows - it is an installer with control panel that installs, and lets you configure apache, mysql, php, phpmyadmin & phpnuke. It is really good, and it works first time:

IB Server (http://software.inkblotresources.com/ibserver/)

[Elizabeth]

Just an FYI, when we got Broadband a few years ago, this was one project we had hoped to complete; hosting our own site. But when we looked into it with our ISP, that measure was strictly forbidden because they wouldn't allow true 24/7 connections - i.e., if your access was inactive, you would be "logged off", and thus no one would be able to access your site. They also said that if you had a program that automatically "kept you active" then your account would be disconnected permanently.

I don't know if this is still the case, but you may want to double check with your ISP before you assume anything :)

-Elizabeth

[dalecosp]

Easy:

Router/firewall using NAT (IP masquerading);

BSD/Linux server running apache and BIND, whatever else you want.

Do all your administration from inside or, if from outside, only via SSH...

Quid pro quos...as Elizabeth said, make sure your ISP will give you a static IP and doesn't block the ports you want (IOW, check the AUP, and maybe even call and ask). As for the static IP, that usually costs a bit more...I've never tried "dynamic DNS" so I don't know how hard that'd be....

[coditoergosum]

It can be done, but you need to know what you're doing if your site will see any kind of real traffic.

I host multiple sites from my ATT cable broadband connection, which has a "dynamic" ip address. In reality my IP has only changed once, and that was when ATT was doing a major expansion of their network in my area. If you do it this way, you need to have your domain names on a DNS server that synchs very quickly in case your IP address changes. Also, what I'm doing is strictly forbidden in the ATT terms of use, so proceed at your own discretion. I don't believe any broadband ISP actually allows you to run servers unless you pay for a higher business class connection. I'm getting to the point where a burstable shared T1 would actually be cost effective as I get paid to host/develop sites. That is really the best way to run a server... but I'm proof that it can be done using a standard residential broadband connection. As Elizabeth and dalecosp noted, you need to research your ISPs first to make sure it will actually be possible. I have quite a bit of experience with 3 different ISPs, MSN, Covad, and of course ATTBI. MSN dsl should be avoided at all costs. You will not be able to run a server on their service... no way, no how (I know because I actually worked for them for a while). Obviously ATTBI will work, but there's a lot of drawbacks... the main one being you'll get shut off if they find you out. Covad on the other hand is in my opinion the best way to go. They have service plans that are reasonably priced which actually allows the use of servers in their terms and conditions.

As far as security is concerned, that's a whole other can of worms. If you're really serious about security, only use Unix (solaris, irix, etc), BSD, or Linux. Windows can be secured effectively, but you really have to be on your toes. If you're going to use winblows (2000 server is really the only acceptable server os from M$) make sure you know about, and know how to correct all of the various security flaws and exploits that exist on windows systems. You'll need to do your homework in this area though... I suggest http://google.com. :D

Good luck.

[dalecosp]

Unix for security, yes. I might even recommend the BSDs over Linux; it seems that the BSD folks update things more frequently if necessary. (Actually, I'm kinda hard pressed to explain exactly what I do mean, but the BSD are continually working on the base OS, so tracking a stable branch of development gets you the newest stuff as soon as reasonably possible. I wonder if in Linux you don't get stuck waiting for Mr. Torvalds to finish work on the next kernel before your distro does anything new, but I'm sure that someone else here can shed more light on that. I only know I've never hacked into a BSD box, but I did get user on a Linux one once.) Of course, the real issue is whether or not the box owner is on top of things. IMHO, nobody should be running an OS that's more than a few months out of the cooker....

[planetsim]

Well in know how to do it kinda.. And all the little things. Just that my mate's getting Broadband and said instead of paying for hosting try and do it this way..

The only problem is i find it hard to explain technical terms into good explanantion that any dummy can understand.
Thanks for the help anyway.

[drag0n]

Im trying to do the same thing, i researched by calling my cabler company asking wheather IP was static or not and if they allowed servers(dumb idea) they said no to both but in turth they never have changed my ip before, why is that? The only trouble Im finsing is that when I connected my router, the router pointed out that my ip was different from the ip without the router. The router has this little program that tells you the status and stuff of your WAN IP. It also gave me Primary and Secondary DNS servers IPS, I dont kno who they blong to or what, lol. But can someone help me set up BIND DNS servvers, im having alot of trouble, im the neweszt newbie to LINUX. Thanks in advanced.

[dalecosp]

Originally posted by drag0n
Im trying to do the same thing, i researched by calling my cabler company asking wheather IP was static or not and if they allowed servers(dumb idea) they said no to both but in turth they never have changed my ip before, why is that? The only trouble Im finsing is that when I connected my router, the router pointed out that my ip was different from the ip without the router. The router has this little program that tells you the status and stuff of your WAN IP. It also gave me Primary and Secondary DNS servers IPS, I dont kno who they blong to or what, lol. But can someone help me set up BIND DNS servvers, im having alot of trouble, im the neweszt newbie to LINUX. Thanks in advanced.

I'd make sure that they don't directionally block some ports in order to enforce their AUP. As for BIND, what kinda issues are you having?

[drag0n]

I dont know what to do! I only have one IP, and what should I do for name servers? I cant seem to get it working, do you know of any step by step guides/howtos to setup DNS serv on ur Linux comp.

[dalecosp]

Checked out www.secondary.org ??

How To's: http://www.dns.net/dnsrd/docs/

HTH,

[drag0n]

I think Ima give up and use Windows to host lol. Or try one of those free DNS or something. See now my other concern is that I dont have Static IP, instead I got DHCP Server, since I have cable conn. Thanks for the info.