Need some help setting up a server - please ;)

[sabka]

OK, this is the scenario:

1.)
I'm going to use
www.mydomain.com by IIS
mail.mydomain.com for POP3 / IMAP
webmail.mydomain.com for webmail

How do I forward each subdomain to the appropriate port/application? I'm running Win2K Server w/ IIS

2.) Security
The server is hosted in a datacenter
Do I need an extra firewall on my server? Or should closing all the unneeded ports on the server be enough protection?

Thanks for the help.

 

[Shadow07]

First off. You will need to create additional "web sites" within IIS.

Are you going to use the same IP address, or are you going to bind multiple IP addresses to the local NIC? If you are going to use 1 IP, then you will need to add in the appropriate HTTP Headers for each site that you wil be running.

If you are going to bind multiple IP addresses to the local NIC, then you can just assign the IP address to the appropriate web site you will be running.

Secondly, I would get a firewall and place it before your web server. Windows 2000 can block the ports you don't want to allow(called Port Filtering). But, it does not handle IP fragment flooding well, nor handle IP spoofs. I would recommend either a PIX, WatchGuard, or if you a familiar with Linux, any LInux distro that is hardened with Bastille, or even SmoothWall.

 

[sabka]

I'm going to be using, if possible, a single IP address. If I can set up the DNS to handle these subdomains uniquely, do I still need the HTTP Headers?
If so, how to I go about doing that?

Thanks