1. what is a server mandatory?

When the server such as the Web that has oneself of purpose when the user, Email, FTP, have two kinds of methods: It is to be built oneself, it is mandatory. Build need to have the professional technology personnel with higher level oneself, want to throw bigger fund to purchase soft hardware, pay to be safeguarded what go up not to seal a top daily even with circuit communication is expended, construction cycle is longer also. Quite under, mandatory an economy, quick and practical. The main action mechanism of Internet is an user / server (Client/Server) , the biggest characteristic is to cross spatio-temporal and cross region. That is to say, even if live far apart from each other, want everybody to be on the network only, both sides can be communicated directly. This offerred an important technical step for us: Control remotely (RemoteControl) . The method that the technical base of mandatory generation and place depend on the server basically is " user / server " and " control the mechanism such as " remotely. Namely no matter where our user is, want to be able to get online only, can be opposite far undertake controlling in the server of skyline, have and safeguard what realize pair of servers thereby. 　

2. server is mandatory as mandatory as fictitious lead plane have what distinction?

The server is mandatory business but fractionize is overall and mandatory as mandatory as fictitious lead plane (VirtualHosting) .

"The server is mandatory " is to be in the center that has the network environment that is linked together with the fact when Internet to place a server, or to its hire a server, satisfy a client to be controlled remotely, WWW is browsed, E-mail is sent and receive, of Ftp file upload the implementation with download function.

"Fictitious lead plane is mandatory " is to point to: an UNIX or NT system overall hard disk delimits fine, server of the Www that the space of every hard disk after fractionize can be become to have independent domain name and IP address by configuration, Email, FTP. Such server, when be browsed by people, it is to look not to come out it shares resource of system of a lead plane with others. On this machine the user of hire space can adopt long-range control technique, if login remotely (Telnet) file is transmitted (FTP) , full-fledged member controls that part airspace that belongs to him, if the fluctuation of information carries, the configuration of applied function is waited a moment.

Through " fictitious lead plane this kind of means has mandatory " an independent site, far him outclass of its performance/price ratio is built and safeguard a server, at present this kind establishs the pattern of the site by more and more be used by place of look forward to, institution. 　

A good WEB server is in 3. what should setting respect have?

Independent domain name: The domain name that every space correspondence becomes independent. Independent IP address: The static IP address that every space correspondence becomes independent, be like: The use Cgi-bin catalog with 151.196.88.99 independent 　 : Every user has his Cgi-bin list, the management of facilitating site controller and use going up to provide Web, Email, FTP3 to plant together with a space server function gifts through the means of user name and password the user logins remotely (Telnet) and file are transmitted (the prerogative of FTP) , be used at site information content go up to carry and be safeguarded daily. Also reflect an user to be opposite on the technology of mandatory server have can install method protection to be visited in order to restrict, to establishing information station check and accept expends a column particularly applicable. 　 of CGI of support of 　 of automatic and respondent AutoResponder, Java supports email server to be passed in real time sound (RealAudio) , real time is deferent image (RealVideo)

How does 4. evaluate the performance with mandatory server?

Want to consider the category of the server above all, it is NT or UNIX server

The hardware of the server is configured

The operating system that installs in the server reachs applied process

The function that server place supports

The when be visited response of the server speed

The speed that 5. server is visited the element is decided by what?

The hardware of the server is configured (rate of card of size of speed of the type that includes a server, CPU, hard disk, memory, net)

The environment inside the net that the server is in and speed

The rate that the network environment that the server is in and Internet backbone net connect

The international of Cernet exports rate

ISP(Internet receives service provider) with the rate of special railway line between Cernet

ISP(Internet receives service provider) the port that opens to client end receives rate

The configuration of computer of the person that visit, the quality of line of the rate of Modem, phone. (Center of Guangdong IDC data Rojoro)

Study point international country develops a case basically, user behavior studies;
Involve interconnection of 10 thousand nets of enterprise China, new network, new network, 35 interconnection (Chinese channel) , the business of operation of lead plane of typical domain name such as times interconnection and respective agent.


Report window:
(one) pass the data with accurate full and accurate and substantial information, the evolution that elaborates market of mainframe of Chinese domain name in the round appears shape and characteristic, help enterprise and investor understand in the round and hold the development feature of market of domain name mainframe and trend.
(2) emphasize companies of pair of market of mainframe of Chinese domain name to undertake an analysis, undertake an analysis according to the characteristic of client of profit pattern, cause and content resource; Through the user to the cognitive degree of the enterprise the analysis studies an enterprise to help an enterprise perfect client service in the position in client memory, make competitive strategy provide reference for investor at the same time.
(3) through be opposite user of market of domain name mainframe studies, master this kinds of special product in the round / the user consumption feature of the service and investment tendency, the likelihood paying fee that analyses an user and apiration paying fee, understand different time paragraph the user attribute difference with different company, make appropriate product and sale strategy provide reference for the enterprise.
(4) the expansibility from the market and emulative set out, the development to prospective market is made forecast, analyse investment opportunity from which, assess gain prospect, give out market sentiment and proposal.

Catalog of formal edition report

Page5 -- I. Study background
Page6 -- II. Notional definition
Page6 -- III. Research technique
Page8 -- IV. Study conclusion
Page9 -- V. Report text
Page9 -- 1. The domain name serves fundamental condition overview
Page9 -- 1.1. Internet domain name registers management and service architecture graph
Page10 -- 1.2. International top class domain name is basic circumstance
Page12 -- 1.3. Chinese Internet domain name develops the history
Page14 -- 1.4. Type of Chinese main domain name develops
Page15 -- 2. Market of mainframe of global domain name grows circumstance analysis
Page15 -- 2.1. The whole world is main 2006 market of top class domain name ranks national international circumstance
Page16 -- 2.2. 2006 global international top class domain name share of each type market
Page17 -- 2.3. 2006 the characteristic of market of global international domain name
Page18 -- 3. Chinese domain name and fictitious mainframe market are analysed
Page19 -- 3.1. Top class domain name counted China International 2006 quantity and circumstance of contrast of amount of CN domain name
Page20 -- 3.2. China is main 2006 share of market of domain name type
Page21 -- 3.3. Chinese market is main 2006 international share of market of type of top class domain name
Page22 -- 3.4. Chinese.CN domain name is of all kinds 2006 model market share
Page23 -- 3.5. Chinese website develops a case
Page24 -- 3.5.1. The website that China differentiated by the category 2006 distributings circumstance
Page25 -- 3.5.2. The website below the CN that China differentiated by the category 2006 distributings
Page26 -- 3.5.3. Before the website that China differentiated by district 2006 distributings 10
Page27 -- 3.6. The development state of affairs of Chinese enterprise website

Page27 -- 3.6.1. Dimensions of Chinese enterprise website
Page28 -- 3.6.2. What Chinese enterprise website takes proportional change case in total website
Page29 -- 3.7. The development state of affairs of Chinese individual website
Page29 -- 3.7.1. Dimensions of Chinese individual website
Page30 -- 3.7.2. What Chinese individual website takes scale change case in total website
Page31 -- 4. Chinese domain name and income of fictitious mainframe market are analysed
Page33 -- 4.1. Current situation of situation of income of market of Chinese domain name and anticipate
Page34 -- 4.2. Amount of Chinese domain name develops a case
Page35 -- 4.3. Chinese market is main 2006 share of market of domain name type
Page36 -- 4.4. Chinese market is main 2006 dimensions of market of domain name type
Page37 -- 4.5. Current situation of situation of income of market of Chinese fictitious mainframe and anticipate
Page38 -- 4.6. China uses the industry measure that fictitious lead plane serves to develop a condition
Page39 -- 5. Chinese domain name and fictitious lead plane serve business analysis
Page39 -- 5.1. Chinese main domain name served business market share 2006
Page40 -- 5.2. Chinese main domain name served income of trade domain name 2006
Page42 -- 5.3. Chinese fictitious lead plane served the market share of business 2006

A few days ago, the author solves the know on method expert seminar from domain name controversy, our country domain name registers center of information of administration China internet network to will be opposite active " domain name controversy settles way " undertake editing, will come on stage recently.

As we have learned, with former " method " photograph comparing, edit newly case have major at 3 o'clock change. Above all, edit record limit domain name controversy solves an orgnaization to accept complained limits, namely the domain name calendar age of place controversy is full two years, domain name controversy solves an orgnaization to will not accept relevant controversy application, in order to protect the stability that the domain name registers human rights increase; Next, right " baleful " registered concept also






Had additional explanation, "Hold sell, rental purpose registers a domain name " the standard that is judgement ill will no longer, the person that register has only to " of everybody of civil rights and interests complain person or competitor to sell, rent or make over this domain name with other means, in order to obtain a profiteering " ability is by the definition " ill will is registered " ; In addition, edit the proposal is specific the rights and interests of domain name holder, for example, whether to have brand to cannot be become measure the level with attributive domain name simply, although the person that be complained did not gain corresponding brand or concerned service trade mark, but it is certain to what hold some domain names to had been obtained famous degree, can enjoy legitimate domain name rights and interests.

The personage inside course of study thinks, edit this of the case come on stage, emphasized more " note first get first " international is current register a system, reflected the big principle that protects the person that broad domain name is registered and holder rights and interests, this also was according with the need that at present health of domain name of our country Cn stabilizes development, reflected fairness of Cn domain name adequately to register a principle honestly. In addition, edit this undoubted to domain name investor it is the news with a good profit, investment risk got reducing apparently. But for the company that protects recognizant weakness to partial network assets, mean need to accelerate the schedule that network assets protects.

Author: Ding Xinfang of lift up?

Management board of domain name of international.travel travel announced a few days ago, the great soldier of region of travel of travel destination.travel that the whole world has more than 3 million is opened immediately register. These domain names include park of resort of bequest of city, famous city, culture, travel, famous places and historical sites, state and other land mark sex tourist attraction. New Year beginning, because be in charge of an orgnaization to begin to relax,examine and approve policy, place name kind.travel travel domain name is registered occurrence blowout phenomenon. The travel domain name of bound of Zhang Jia of our country famous tourist attraction, Li Jiang just also is approved.

Does American.travel register authoritative personage Tom? Barrett says, as a result of place name kind the sensitivity that travel domain name has the side such as its politics, society, director orgnaization is quite so careful to its. But the progressively promotion as.travel, international.travel management board begins to loosen the policy restriction of a few respects. Now, want domain name applicant to be able to offer the relevant website that travel serves only, have lawful enrollment purpose and utility, the company related any and journey, can register domain names of these valuable place name.travel.

Our country is the 2nd country that begins travel domain name to register. In recent years our country tourism lasts hot, development is swift and violent, .travel domain name offerred to march inaccessibly for domestic tourism again world scenic is good chance. Broad investor very the investment perspective that values.travel domain name. Top class to this group course of study domain name also takes domestic travel industry seriously very much. Among them, net of Chinese travel net, the China International travel agent, journey that carry Cheng pass domain name of domestic exclusive.travel to register an orgnaization in succession " 10 beautiful of countrywide " times interconnection (Www.now.cn) the travel domain name that registered oneself, protect the trademark of oneself first. Chinese travel net has enabled China.travel as its advocate domain name.

The reporter understands from times interconnection, because management board of domain name of.travel of the international before this is right place name kind travel domain name is examined and approve relatively strict, home is many and famous although the tourist attraction is successful submitted application, but only minority was obtained pass finally. And this as policy relax, examine and approve speed accelerate, the travel domain name of the city of numerous and famous travel such as Home Zhang group, Li Jiang is registered by successful approval (the website that input Http://www.zhangjiajie.travel can arrive directly at park of forest of state of Home Zhang group now) .

Be in charge of orgnaization policy relax make travel domain name is registered become more convenient, this is sure to make what this domain name registers a quantity promote considerably. To this, management board of domain name of international.travel travel also reminds the world the government of each district and travel industry are in charge of a branch, basis " note first get first " principle, resource of travel domain name will have a few valuable place name inside their area under administration by the person the danger of the swift-footed arrive first. Each district government should raise protective consciousness, register the travel domain name of this locality place name as soon as possible.

During day of world intellectual property comes, beijing High Court lawsuit of the domain name since amount to delimits went up full stop. Network industry ever exploded 2000 give an astonishing inside story: Top class domain name has Chinese Internet actually in the hand that 10 ％ grasp in a company, finite liability company has passed information of Beijing nation network CNNIC registered thousands of domain name, include brand of as well-known as hundreds international such as home of Du Bang, Bao Jie, appropriate company among them identical abecedarian domain name, what become the domain name on CNNIC to register thereby is the biggest door. The domain name is equivalent to doorplate or address in the action in Internet. All over the world, without reduplicative domain name, no matter be international domain name or domestic domain name, the user that the whole world receives Internet can accurate arrive without by accident visit. The domain name is self-evident to the importance of the enterprise. Country network company this action makes a lot of companies were immersed in passivity undoubtedly, also make oneself were on dock, much home crossed national big company to offer suit to its. Country network company also loses a lawsuit again and again because of tort.
The lawsuit of a few domain names of final judgment of this Beijing tall courtyard, country the adversary of the net still is (the United States) wrap up of combination of Bao Jie company, United States serves a company to wait for such crossing national big company. In the country among the dispute case of network company and treasure clean company, although country the net states he registers a domain name again and again nonexistent subjective ill will, did not make unfair competition, but the testimony that cannot take be convinced of person of sell one's own things however comes. Treasure clean company registered international domain name in August 1995 " Olay.com " etc registered trade mark is using power. Network company was the same as the country in May 1999 center of Chinese Internet information (CNNIC) the 3 grade domain name that identifies a gender is had in registering this domain name " OLAY " the registered trade mark with Bao Jie company " O-LAY " identical, as prevenient as treasure clean company registered domain name " O-lay.com " in have the 2 grade domain name that identifies a gender " OLAY " identical. The court thinks enough causes the mistake of relevant public, and country network company registers his the domain name, did not debut up to now use, go up objectively hampered treasure clean company is registered in China " O-lay.com.cn " the right of the domain name, the subjective ill will of behavior is clearly, already made unfair competition, company of adjudicative nation network is cancelled " Olay.com.cn " domain name, recoup loss of treasure clean company 900 yuan.

The United States combines wrap up to serve a company is the biggest package on the world fast give a company, held water 1907. The English name of this company is UnitedParcelServiceofAmer-ica, inc, abbreviate is " Ups " . This company was registered in 160 many countries and area " Ups " brand. This company registered international domain name on computer network in April 1992 " Ups.com " undertake use. 1993, the United States laps the company enters China to enter go by battalion and advertisement propaganda jointly. Came 1997 1998, the United States combines approve of bureau of brand of China of package company classics, register on multinomial commodity and service " Ups " reach graphical trade mark.

On May 25, 1999, country network company registered a domain name in center of information of Chinese internet network " Ups.com.cn " , did not use actually up to now. Arrive in the accused after the court, country network company does not think however him tort, because " Ups " not be famous label, they register a domain name medium " Ups " be " UPS " abbreviate. Face this kind to explain. The court thinks: "The UPS is supplied implement " the English abbreviate that is English Uninterruptible Power Supply, it is the name that computer industry uses a kind of power source, this name is begin to use after the computer appears, the English abbreviate that is later than the United States to lap the company uses this company name jointly " Ups " time,

Combine the evidence that package company submits according to the United States, can maintain this company to go up through the advertisement of media and outdoors advertisement waiting in the press, magazine use " Ups " registered trade mark, use on computer network " Ups " registered trade mark undertakes management an activity, make " Ups " registered trade mark is relevant public know, it is certain to have famous degree, can maintain in relevant public, contain " Ups " registered trade mark and company of American combination package are to be equal connect.

Network company also admits the country in register " Ups.com.cn " before the domain name, not to it relevant prevenient right, also did not register the logical explanation of this domain name. After registering this domain name, disloyal all the time border is used, can maintain a country network company is to prevent combination to lap the company registers this domain name of purpose, have clear commercial purpose, the net registers the country the behavior of this domain name has ill will, company of adjudicative nation network is cancelled " Ups.com.cn " domain name.

The other that adjudicates in the corresponding period in lawsuit of a few domain names, country network company loses a lawsuit likewise. Have in China certain and famous spend " SUBWAY " , " EILE " , " NINEWEST " the person of trade mark right of brand: Limited company of American doctor combination, Holand surpasses 100 flavour international finite liability company, (France) press of Li Baiqi of humble of birch a pavilion or house on a terrace, (the United States) be able to bear or endure round company also recaptured Enxibuji respectively oneself Chinese domain name.

·On April 1:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 2:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 3:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 4:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 5:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 6:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 7:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 8:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 9:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 10:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 11:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 12:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 13:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 14:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 15:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)






·On April 16:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 17:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 18:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 19:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 20:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 21:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 22:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 23:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 24:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 25:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 26:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 27:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 28:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 29:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)






·On April 30:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

When you open a certain website, you may not know, this visit is possible already by far the place of a company that is in the United States is recorded -- , as a result of the root domain name that runs his the server was in China to establish a mirror, american power luck believes a company (Verisign) the record that can obtain Chinese user domain name to visit easily.

Recently, chinese net connects power luck of group and United States to believe (VeriSign) company opens server of mirror of China of Internet root domain name jointly, think in the masses this act will carry user of fast our country to visit the backside of the domain name outside the condition such as COM, the visit data that is Internet of China of American company monitoring however offerred advantage.

The reporter understands, internet shares server of 13 roots domain name, come from A M number, respectively deploy is in the United States, England, Sweden and Japan. In fact, be in early 2003, blame profitability is organized -- , internet association (ISC) its the F root server of place administer built a mirror in China, become the server of mirror of the first root that China has. In September 2005, the blame profitability orgnaization that manages I root " Swedish country Internet exchanges a center " in center of information of Chinese internet network (CNNIC) established mirror of the 2nd root of Chinese -- , I root mirror. And what what established recently is the J root that manages by place of Verisign of American business company the mirror of the server. "No matter introduce server of how many mirror, still cannot solve the problem that bypass of the domain name outside the condition such as COM visits thoroughly. " internet name is organized with address allocation (ICANN) Qianhualin's researcher says chief scientist of center of network of director, Chinese Academy of Sciences.

Introduce according to him, through root mirror server is being established in home, it is the first pace that the domain name visits only, raised the rate with analytic root namely. But, for domain name of the COM that is set in the United States to a large number of analytic servers, NET, its greater part decomposes analyse to still need ability of bypass United States to finish, the promotion of speed is almost negligible not plan.

As we have learned, servers of some two roots mirror are embraced before China, it is by indifferent blame profitability international organization is built in China, security is higher, and the visit of Chinese Internet log submissively gives foreign business company, safe hidden trouble abruptly protruding shows. Expert introduction, verisign can carry the visit daily record of root server mirror completely, the analysis reachs the visit information of Chinese netizen even each websites, especially the visit feature of website of important orgnaization, government. Thereby, the visit habit of Chinese netizen and the analytic information that visit information and website expose the surveillance at American company completely under.

Internet safety expert points out, "Because China did not have the administrative power of root of the any in 13 roots server, in root domain name analytic next devoid dominant counterpoise, if domestic website counts the COM domain name that runs by the company outside the condition in great quantities, once produce international conflict, the root server mirror of China of nip off of the orgnaization outside the condition and mirror of COM domain name, the website of domain name of all use COM will not be visited, chinese Internet will is immersed in break down, consequence is unimaginable. " this expert makes clear a proposal, while China is striving for administrative power of pair of server of root domain name, must reduce what wait for the domain name outside the condition to COM to depend on degree, ability enhances the integral security of Chinese Internet.

The domain name registers Com 60 yuan / year Chinese channel New network Cn 50 yuan / year Chinese channel New network
Contact 13013980666 0516 of telephone call of king of QQ 470666 graph- - 83821968

Eee100.cnRomen.cnOnesun.cnTwyp.cnHnhct.cnJsyp.cnCdyp.cnAhyp.cnSxyp.cnZzyp.cnXgyp.cnAmyp.cnNjyp.cnNbyp.cnDlyp.cnYcyp.cnJnyp.cnHkyp.cnCzyp.cnCsyp.cn 2b4b.com
2dbj.com
2ehr.com
3bvo.com
3doe.com
5icn.com
5t88.com
5ygw.com
5yir.com
61mm.com
62cq.com
63yz.com
678o.com
6nic.com
71gm.com
72cd.com
72kk.com
77zz.com
8fwl.com
97ad.com more deletes list of Cn country domain name now... more deletes list of international domain name now...

The domain name trades forum

IIS (Internet Information Server) one of Web servers that serve as current popularity, provided powerful Internet and Intranet service function, how to strengthen the safe mechanism of IIS, build the Web server of a high safety performance, already made the main component that cannot ignore in IIS setting.

The article will be passed the following two respects will elaborate the method that strengthens IIS safe mechanism.

One, it is a foundation with the safe mechanism of Windows NT

As the IIS that moves below environment of Windows NT operating system, its security also should build the base in Windows NT security over.

1. Use NTFS file system

NTFS can undertake administrative to file and catalog, and FAT (file allocation is expressed) file system can provide the security that shares stage only, the proposal uses NTFS system when installing Windows NT.

2. Share the modification of attributive

Below default circumstance, every build to be shared newly, its Everyone user can be enjoyed " complete control " share jurisdiction, accordingly, building after sharing, want newly to revise Everyone default attributive instantly.

3. For systematic manager Zhang date more renown

Region user manages implement although can limit the number that guesses countersign, but to systematic manager Zhang date is not used however, this may bring the opportunity that atttacks countersign of administrator Zhang date to illegal user, manage through region user implement to administrator Zhang date more renown can yet be regarded as a kind of tweak. Specific setting is as follows:

(1) start " region user manages implement " ;

(2) pitch on administrator Zhang date;

(3) start " user " those who choose sheet to fall " name again " undertake modification to its.

4. The NetBIOS on revocatory TCP/IP

The administrator can carry the image between name of NetBIOS of tectonic target station and its IP address, the other server that goes up to Internet undertakes administrative, illegal user also can find an opportunity that can be exploited to sbs advantage from which. If this is planted,long-range management is not must, should abolish instantly (pass network property tie calm option, between revocatory NetBIOS and TCP/IP bind calm) .

2, the safe mechanism that sets IIS

1. Safe problem of the attention answers when installation

(1) avoid installation to be in advocate on region controller

After installing IIS, IUSR_Computername anonymous account will be made on the computer of installation, this account is added in region user group, provide the visit limits of authority that uses at region user group to every faceless user that visits Web server thereby, this brings huge potential risk to IIS not only, and likely still embroil is whole the safety of region resource, want to avoid to install IIS on region controller as far as possible, especially advocate region controller.

(2) avoid installation to be on systematic partition

Put IIS on systematic partition, can make systematic file and IIS face illegal visit likewise, make illegal user invades systematic partition easily.

2. User pilot security

(1) faceless user

The faceless user IUSR_Computername of the generation after installing IIS (the password arises randomly) , its are faceless the visit brings potential security problem to Web server, answer its attributive to try to control. If do not have faceless visit need, can cancel the faceless service of Web. Specific means:

① starts ISM (Internet Server Manager) ;

② starts WWW to serve attribute page;

③ cancels his faceless visit serves.

(2) average user

Through using number and letter (include big small letter) combinative countersign, increase the frequency of modification password, of the entry attempt that block fails and account live period wait to undertake administrative to average user account.

3. The security of entry attestation

IIS server provides pair of users the identity attestation of 3 kinds of forms.

Faceless visit: Do not undertake between need and user alternant, allow anyone faceless visit site, the security in attestation of these 3 kinds of identities is lowest.

Basic (Basic) test and verify: The user name that below this means the user inputs and countersign upload in the network with means of proclaimed in writing be defeated, do not have any adding close, illegal user can come through be being monitored on the net intercept data bag, get user name and password from which, safety performance is average.

Windows NT requests / answer way: The browser undertakes communicating through adding close means and IIS server, prevented listener-in effectively, it is the attestation form with higher security. The defect of this kind of means is only IE3.0 and above version just support.

4. Visit attributive control

(1) the visit attributive of folder and file: Place the folder on NTFS file system and document, want to try to control to its attributive on one hand, undertake to different user group and user different limits of authority is installed; Additional, the respect such as the purpose that still can use the member that the function of examine and verify of NTFS is comprised to certain and specific user to read a document undertakes examine and verify, the discovery such as the use that is like object of file visit, user effectively through surveillance is illegal what the user has illegal activity is augural, try in time to prevent check. Specific means:

① is started " region user manages implement " ;

② is started " regular " choose sheet to fall " examine and verify " option;

③ is installed " examine and verify is regular " .

(2) the visit attributive of WWW catalog: Had installed the folder of Web catalog, can come true to visit the control of attributive to WWW catalog through operating page of Web site attribute, and all files below this catalog and child folder will accede these security. WWW serves besides providing the limits of authority that NTFS file system provides, early childhood to take limits of authority for reading, allow an user to read the document in take or downloading WWW catalog; Executive attributive, allow an user to run the program below WWW catalog and scenario. Specific setting method:

　　IIS of fictitious lead plane is on guard inbreak 10 common problems are solved

1. How to let ASP script move with System attributive?

Revise the fictitious catalog of correspondence of place of your Asp script, repair " of " application program protection instead " low " .

2. How to prevent Asp trojan?

Be based on the Asp trojan of FileSystemObject component

Cacls %systemroot%\system32\scrrun.dll /e /d Guests // prohibits Guests is used

Regsvr32 Scrrun.dll /u /s // is deleted

Be based on the Asp trojan of Shell.application component

Cacls %systemroot%\system32\shell32.dll /e /d Guests // prohibits Guests is used

Regsvr32 Shell32.dll /u /s // is deleted

3. How to add close Asp file?

From Microsoft free download moves directly to Sce10chs.exe can complete installation process. After installation ends, will make Screnc.exe file, this is a command tool that moves in DOS PROMAPT. Moving Screnc - L Vbscript Source.asp Destination.asp generates the new document Destination.asp that includes script of close article ASP. Open with notebook look always in "" , without giving thought to whether annotate, become cannot reading close article, but cannot add close Chinese.

4. How to extract Urlscan from inside IISLockdown?

Iislockd.exe /q /c /t:c: \Urlscan

5. How to prevent Content-Location heading the in-house IP address that exposed Web server?

Carry out

Cscript C:\Inetpub\adminscripts\adsutil.vbs Set W3svc/UseHostName True

Final need starts Iis afresh.

6. How to solve HTTP500 in-house mistake?

Iis Http500 interior is wrong major reason, basically the pace is caused. We want date of synchronous Iwam_myserver Zhang to apply the password in the program to be able to solve a problem in Com only.

Carry out

Cscript C:\Inetpub\adminscripts\synciwam.vbs -v

7. How to enhance the ability of Iis defence SYN Flood?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]

The Syn that start atttacks protection. Default the value is 0, express not open atttacks protection, the value is 1 and 2 state the Syn that start atttacks protection, set into 2 later, safe level is higher, to why be being planted the state falls consider as attack, need the TcpMaxHalfOpen below the basis and TcpMaxHalfOpenRetried value, the condition of set will spark started. What the attention needs here is, NT4.0 must be set for 1, set for 2 hind in some kind special data wraps next meetings to bring about a system to restart.

"SynAttackProtect"=dWord:00000002

Allow the half join amount that open at the same time. Alleged half join, state unfinished makes built TCP conversation, using Netstat command to be able to see those who assume SYN_RCVD position is. Here uses Microsoft to suggest to be worth, the server is set for 100, advanced server is set for 500. The proposal can be set a bit a bit tinier.

"TcpMaxHalfOpen"=dword:00000064

Whether does judgement put what atttacking to spark dot. Here uses Microsoft to suggest to be worth, the server is 80, advanced server is 400.

"TcpMaxHalfOpenRetried"=dword:00000050

The setting awaits SYN-ACK time. Default the value is 3, disappear of this one process costs default a 45 seconds. The value is 2, use up time to be 21 seconds.

The value is 1, use up time to be 9 seconds. Lowest can be set for 0, express not to await, use up time to be 3 seconds. This value can be revised according to sustaining attack scale. Microsoft site safety is recommended for 2.

"TcpMaxConnectResponseRetransmissions"=dword:00000001

Setting TCP transmits individual data again paragraph frequency. Default the value is 5, disappear of this one process costs default a 240 seconds. Microsoft site safety is recommended for 3.

"TcpMaxDataRetransmissions"=dword:00000003

Yesterday reporter from China of domain name agent company of 10 thousand networks learns, this company had adjusted the acting price of CN domain name, the surpasses low case to achieve industry of representative of domestic CN domain name lowest record with 17 yuan.

Before this, the price of representative of CN domain name of agent of domestic mainstream domain name all fluctuates in 339 yuan, this action will cause 10 thousand networks possibly new round price war. 10 thousand nets of Chinese are in charge of a personage expressing, of price of representative of CN domain name reduce greatly, have the plan that hopes the help makes 10 thousand representatives join in now actually not only, the goal that surmounts domestic COM domain name to register a quantity also achieves inside the time that hopeful makes CN domain name is in one year, at present the enrollment of domestic CN domain name and COM domain name is measured differ nearly 910 thousand.