Bằng cách nhấp chuột vào một đối tượng máy tính trong cửa sổ chi tiết phải, bạn có thể hiển thị thuộc tính của nó, như thể hiện trong hình Hình 24,22 truy cập của trang thuộc tính cho mỗi thành viên mảng thông qua các máy tính thư mục | 1030 Part V ISA Server Note__ We recommend that you disable the IIS services on the ISA server. When properly configured the ISA Server Firewall and Web Proxy services confer a high level of security against external network attacks. Adding services to the ISA server creates portals of attack that Internet criminals can use to compromise the ISA server and the internal network. Well-known exploits can be aimed against any of the IIS services and potentially disable security provided by the ISA Server software or create a denial-of-service DoS condition. The IIS Web Publishing Service is especially problematic in this regard. Although we will spend quite a bit of time discussing methods you can use to publish services on the ISA server itself never do so unless budgetary constraints prevent you from purchasing a dedicated ISA Server computer. You obtain a level of security based on how much money you can spend. How do you know if socket pooling is enabled on the ISA server You can you the netstat -na command to list all the active listening ports. Note that just because a port is listening doesn t mean that anyone can connect to it. If you enabled packet filtering on the ISA server none of the listeners on the external interface are available unless you explicitly create a publishing rule or packet filter allowing access to the socket a socket is a combination of a TCP or UDP port number and an IP address . Figure shows the results of a netstat -na before disabling socket pooling. Notice in the Local Address column the entries for IP address entries indicate that the associated port is listening on all IP addresses. A large number of services are listening on all IP addresses. We need to disable socket pooling to prevent the server from listening on TCP ports 21 FTP 25 SMTP 80 HTTP and 119 nNtP for all interfaces. Note that TCP 42 WINS and UDP 53 DNS Query are also
