Server Management WEB Servers Win2K TCP/IP Environment WWW : IIS 5 / Lotus Domino SSL : Secure...

62
Server Management WEB Servers Win2K TCP/IP Environment WWW : IIS 5 / Lotus Domino SSL : Secure Socket Layer Apache HTTP Server National Taiwan Univ. of Science & Technology /AC2Net2K Server Management (Part-II) 88 學學學 : 學學學學學學學學學 學學學學學學學學 / 學學學學學學

Transcript of Server Management WEB Servers Win2K TCP/IP Environment WWW : IIS 5 / Lotus Domino SSL : Secure...

Page 1: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Server Management WEB Servers

Win2K TCP/IP EnvironmentWWW : IIS 5 / Lotus DominoSSL : Secure Socket LayerApache HTTP Server

National Taiwan Univ. of Science & Technology /AC2Net2K

Server Management (Part-II)

88 學年度: 企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 2: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Network :General Concepts

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 3: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

3TCP/IP Protocol Stack

IP-TCP /UDP- (Service: Port#)

Security: Kerberos, SSL, S/MIME

Page 4: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

4

Page 5: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

5

Page 6: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

6TCP/IP Detail

Page 7: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

7Ping / Trace Route (NeoTrace)

Page 8: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

8 Windows Networking

Page 9: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

9Network & Ethernet Card

Page 10: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

10Ethernet Adapter: Detail Setting

Page 11: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

11Header : Data Encapsulation

Page 12: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

123-Way Handshaking

Page 13: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

13DoS Attack

DDoS : Distributed Denial of Service

SYN, ACK/SYN, ACKACK

Page 14: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

14

C/S Interaction

Socket()Bind()Listen()Accept()

Connect()

Read/WriteClose()

Page 15: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

15Socket Programming

Connection-Oriented vs.

Connectionless

Page 16: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

16HOSTS / LMHosts

Page 17: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

HTTP Server Overview

What is New in Win2K ServerWeb Server : IIS4 / IIS5

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 18: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

18 Win2K: What is New for Connection Wizard

VPN –Private Network

Page 19: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

19Proxy Server for HTTP / Socks Services

Page 20: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

20

Proxy Server

Packet Filter

Firewall

Proxy(代理 ):

Web

WinSock

SOCKS

Page 21: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

21Win2K -- Network Setting: TCP/IP

Page 22: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

22Windows 2000 :New Features

\NTDS (ADS資料庫 )

Page 23: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

23

Page 24: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

24Active Directory: 目錄伺服器

•ADS Server

DNS-Style Domain NameDNS-Style Domain Name

Page 25: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

25

Page 26: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

26

NT4/IIS 4AnonymousSecure

SSL NT

AccountsIP/Domain Restriction

Page 27: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

27 IIS --- Security Gates for Accessing Website Resources

Four-Level IP Address Login Control

身份鑑別驗證Authentication

Object/ Access RightACL (Resource)

OS / Permission

Page 28: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

28 Microsoft Web Site : Improve your Knowledge about IIS 4

Page 29: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

29IP 位址– 安全領域

Page 30: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

30

Page 31: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

31IIS 5 : What is New ?

Page 32: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Apache HTTP Server

Server Configuration

Administration

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 33: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

33IBM / Apache HTTP 1.3.6.2

Page 34: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

3480 HTTP / 8008 Admin

HTTP.CONF (Apache Server Configuration)

Page 35: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

35 HTTP Configuration

Authenticate Group Person

Mapping Alias Redirect User Dir

Security/Log

Page 36: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

36Virtual Directory / Alias

Page 37: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

37IBM SSL Security Module

SSL Support: keyfile (Server Certificate)

Page 38: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

38SSL : HTTPS

HTTPS://host/dir

Page 39: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

39X.509 Certificate

Page 40: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Internet Information Server

IIS 4 : HTTP 1.1 SupportIIS 5: Next Generation

ASP Support Database Connection

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 41: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

41

Page 42: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

42SSL

Page 43: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

43Secure Options

Page 44: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

44Security

SSL v3

Tunnel

Page 45: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

45IIS – Firewall can Save it ?

Page 46: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

46Microsoft Proxy Server 2

Page 47: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

IIS Server (slide show)

IIS 4IIS 5

IE 5 (Browser)

Page 48: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Client : Personal Certificate

IE 4 / Netscape 4.x

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 49: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

49Example: Alice vs. Bob

Page 50: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

50Guess What It is ?

Page 51: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

51 RSA : Public/Private key Pair

Page 52: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

52IE – Secure Mail

Page 53: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

53Digital ID from VeriSign Corp.

Page 54: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

54Mail vs.Certificate

Page 55: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

55How to Use Digital ID

Page 56: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

56

Page 57: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Apache Server (slide show)

Page 58: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

58Virtual Directory : Alias

Page 59: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

59Demo is Worked !

Page 60: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

60Certificate :SHA1 / MD5

Page 61: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Lotus /Domino Server (slide show)

Page 62: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan.

Q&A

Thanks !

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授