62
Server Management WEB Servers Win2K TCP/IP Environment WWW : IIS 5 / Lotus Domino SSL : Secure Socket Layer Apache HTTP Server National Taiwan Univ. of Science & Technology /AC2Net2K Server Management (Part-II) 88 學學學 : 學學學學學學學學學 學學學學學學學學 / 學學學學學學

Server Management WEB Servers Win2K TCP/IP Environment WWW : IIS 5 / Lotus Domino SSL : Secure Socket Layer Apache HTTP Server National Taiwan

Embed Size (px)

Citation preview

Page 1: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Server Management WEB Servers

Win2K TCP/IP EnvironmentWWW : IIS 5 / Lotus DominoSSL : Secure Socket LayerApache HTTP Server

National Taiwan Univ. of Science & Technology /AC2Net2K

Server Management (Part-II)

88 學年度: 企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 2: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Network :General Concepts

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 3: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

3TCP/IP Protocol Stack

IP-TCP /UDP- (Service: Port#)

Security: Kerberos, SSL, S/MIME

Page 4: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

4

Page 5: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

5

Page 6: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

6TCP/IP Detail

Page 7: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

7Ping / Trace Route (NeoTrace)

Page 8: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

8 Windows Networking

Page 9: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

9Network & Ethernet Card

Page 10: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

10Ethernet Adapter: Detail Setting

Page 11: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

11Header : Data Encapsulation

Page 12: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

123-Way Handshaking

Page 13: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

13DoS Attack

DDoS : Distributed Denial of Service

SYN, ACK/SYN, ACKACK

Page 14: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

14

C/S Interaction

Socket()Bind()Listen()Accept()

Connect()

Read/WriteClose()

Page 15: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

15Socket Programming

Connection-Oriented vs.

Connectionless

Page 16: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

16HOSTS / LMHosts

Page 17: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

HTTP Server Overview

What is New in Win2K ServerWeb Server : IIS4 / IIS5

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 18: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

18 Win2K: What is New for Connection Wizard

VPN –Private Network

Page 19: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

19Proxy Server for HTTP / Socks Services

Page 20: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

20

Proxy Server

Packet Filter

Firewall

Proxy(代理 ):

Web

WinSock

SOCKS

Page 21: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

21Win2K -- Network Setting: TCP/IP

Page 22: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

22Windows 2000 :New Features

\NTDS (ADS資料庫 )

Page 23: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

23

Page 24: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

24Active Directory: 目錄伺服器

•ADS Server

DNS-Style Domain NameDNS-Style Domain Name

Page 25: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

25

Page 26: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

26

NT4/IIS 4AnonymousSecure

SSL NT

AccountsIP/Domain Restriction

Page 27: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

27 IIS --- Security Gates for Accessing Website Resources

Four-Level IP Address Login Control

身份鑑別驗證Authentication

Object/ Access RightACL (Resource)

OS / Permission

Page 28: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

28 Microsoft Web Site : Improve your Knowledge about IIS 4

Page 29: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

29IP 位址– 安全領域

Page 30: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

30

Page 31: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

31IIS 5 : What is New ?

Page 32: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Apache HTTP Server

Server Configuration

Administration

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 33: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

33IBM / Apache HTTP 1.3.6.2

Page 34: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

3480 HTTP / 8008 Admin

HTTP.CONF (Apache Server Configuration)

Page 35: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

35 HTTP Configuration

Authenticate Group Person

Mapping Alias Redirect User Dir

Security/Log

Page 36: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

36Virtual Directory / Alias

Page 37: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

37IBM SSL Security Module

SSL Support: keyfile (Server Certificate)

Page 38: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

38SSL : HTTPS

HTTPS://host/dir

Page 39: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

39X.509 Certificate

Page 40: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Internet Information Server

IIS 4 : HTTP 1.1 SupportIIS 5: Next Generation

ASP Support Database Connection

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 41: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

41

Page 42: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

42SSL

Page 43: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

43Secure Options

Page 44: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

44Security

SSL v3

Tunnel

Page 45: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

45IIS – Firewall can Save it ?

Page 46: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

46Microsoft Proxy Server 2

Page 47: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

IIS Server (slide show)

IIS 4IIS 5

IE 5 (Browser)

Page 48: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Client : Personal Certificate

IE 4 / Netscape 4.x

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授

Page 49: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

49Example: Alice vs. Bob

Page 50: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

50Guess What It is ?

Page 51: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

51 RSA : Public/Private key Pair

Page 52: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

52IE – Secure Mail

Page 53: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

53Digital ID from VeriSign Corp.

Page 54: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

54Mail vs.Certificate

Page 55: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

55How to Use Digital ID

Page 56: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

56

Page 57: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Apache Server (slide show)

Page 58: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

58Virtual Directory : Alias

Page 59: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

59Demo is Worked !

Page 60: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

60Certificate :SHA1 / MD5

Page 61: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Lotus /Domino Server (slide show)

Page 62: Server Management WEB Servers  Win2K TCP/IP Environment  WWW : IIS 5 / Lotus Domino  SSL : Secure Socket Layer  Apache HTTP Server National Taiwan

Q&A

Thanks !

88 學年度 :企業網路及應用整合國立台灣科技大學 / 詹朝基副教授