On Sunday, Jun 15, 2003, at 12:56 US/Pacific, Doug White wrote: > What do we do to install the product anywhere but the web root, which > requires > that the default web site be always running? This exposes the server > to the > constant spew of unsolicited probes and attacks.
I never install using the default web root. I either install CF code to its own docroot or within the default CF install - neither of which is my web server web root. And I don't recall doing anything special to get that to happen. > How do you install the product where it can only be addressed by the > http > headers and not by the IP number? Well, I use Apache and handle everything through that. > How do we install it so that the CF Administrator applet can be opened > in a web > site that is not tied to 127.0.0.1 or localhost? I don't understand you - the default install lets you access CF Admin from any machine. You can always run the JRun web server for CF Admin and use Apache (or, presumably, IIS) to handle non-CF Admin traffic through the connectors. We have it set up so the JRun web server is not accessible outside the network (in fact, not outside the network layer on which the app servers run). > On the other hand, I do finally have a web site up and running > successfully, set > up in a secure manner, on a CFMX/Win2003 box, and am preparing to add > others > very soon. Glad to hear that! I know you've had a rough time with installs so far so I'm pleased that it hasn't put you off. > The issue is not that it can't be done, the issue is doing it fast, > efficient, > secure, and with a minimum of "after-installation" hacks, tweaks, and > editing > config files to get the job done. Even with the original CFMX Server product, I could do about eight uninstall / install cycles a day (and often did while I was working with pre-release builds). Of course, those were 'standard' installs. Considering how many variables there are in a full secure production setup, how quick do you need it to be? (That's a serious question) Sean A Corfield -- http://www.corfield.org/blog/ "If you're not annoying somebody, you're not really alive." -- Margaret Atwood ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
