Aengus Lawlor wrote:
> >We usually setup servers (NT or Unix) for vitual hosts with separate 'web' and
> >'logs' directories for each virtual host client. e.g. (in NT/IIS style)
> >
> > inetpub\wwwroot\vhostA\logs (where the logs are stored from IIS MMC)
> > inetpub\wwwroot\vhostA\web (which is pointed to by www.vhosta.com)
>
> I strongly discourage creating Virtual Hosts in the wwwroot directory -
> it's the default root for the Default server, so that
> http://12.34.56.78/vhostA/logs/ will give full access to the logs by
> default, and http://12.34.56.78/vhostA/web/ may bypass any ISAPI filters
> or other IIS configuration restrictions placed on the virtual host,
> unless you've taken steps to modify the behaviour of the Default Web
> site. Virtual hosts should be rooted in the Inetpub directory
> (inetpub\vhostA\) rather than the wwwroot directory.
Point taken. I've never actually used the wwwroot folder in the way it was
intended. The first security step on any systen being to change any well-known
system defaults to non-standard behavior. So, yes, in a default install, your
directory arrangement makes better sense.
inetpub\vhostA\logs (where the logs are stored from IIS MMC)
inetpub\vhostA\web (which is pointed to by www.vhosta.com)
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
