Managing server security

This chapter covers security: a growing problem on the Internet in general and a particular headache for administrators who manage sites with sensitive or commercial information. There are many aspects to implementing a good security system on your site and I cover all the angles in the following pages.

Security on the Internet or an intranet is a worry because of the lack of security within the TCP/IP protocol that is used for all communications. Add to this the way in which commands and messages are sent as plain text over the network and you can soon get paranoid about the risks to your server. However, it is not only you that is worried! The users can never be quite sure that they are connected to a reputable server who is really the company they expect unless you fit security measures to help the user.

This chapter covers all aspects of security from the potential loopholes in the network, server software and applications programs through to ways of protecting your site, your e-mail and your date. Whatever you do, do not ignore the threat to your server and try and fit as many of the security features that I have mentioned to provide a secure Internet connection or intranet that is safe for its users.

Security loopholes in TCP/IP

TCP/IP is the main protocol suite used within the Internet and for this it is an excellent, flexible and multi-purpose solution. However, the one feature it is not designed...