For security webcat should run on a server on a dmz port and spectrum on
a separate server inside your firewall. If you are using an earlier
version of IIS then Microsoft has a IIS lockdown tool that you can use
to secure it.
I would also make sure that all of the current support packs are in
place. It would be better to use Windows Server 2003 because the
lockdown tool is built in and in place as the default. The academic
license for 2003 standard is less than $100 dollars. Once webcat is
outside the firewall and spectrum is inside you will have to use a tool
created by Sagebrush to tell you what port to open up on your firewall
to let access only to spectrum from the web server. The port is an
ascii value dependent on the name of your faircom server.
Another option is to use remote desktop connection to a terminal server
that has access to spectrum.
>>> [log in to unmask] 2/4/2005 10:18 AM >>>
I am wondering what other schools have worked out in terms of setting
up winnebago library card catalog access over the web.
we are running winnebago/webcat on a win2000 server and I managed to
configure access across my firewall on port 80 to the internal fixed
of the win2000 server.
I should have trusted my gut and been more wary as it took only a week
for some port scanning hacker to wreak some havoc with my network.
The network is somewhat stabilized now but I am very hesitant to open
any ports or services on or to an older win2000 server. I suspect that
moving to win2003 server would be a logical first step. I told My
librarian I would put out a request for advice to see how other
might be serving their card catalogs to home users while maintaining
some security control...
This e-mail may contain information protected under the Family Educational Rights and Privacy Act (FERPA). If this e-mail contains student information and you are not entitled to access such information under FERPA, please notify the sender. Federal regulations require that you destroy this e-mail without reviewing it and you may not forward it to anyone.