locked
Denying access from Internet to WHS RRS feed

  • Question

  • This is something which has been on my mind for a while. Is is possible to be 100% secure from Internet access to a WHS?
    I'm asking as I would hate to think WHS is visible from outside my internal home network. Given that the xbox 360 can access mucis on WHS without any names or passwords, using Media Extender(?), is this 'broadcast' visible outside the LAN? The only port forwarding on my router is for MS Live for Games for Windows and XBOX Live.
    I know this sounds paranoid, but with all the bad press the internet is getting, I would like to be as secure as possible.
    Thanks in advance.

    Monday, March 1, 2010 3:26 PM

Answers

  • There should be no need to "harden" your server. The only thing that should be exposed on the Internet is the Remote Access web site, and that's pretty secure. If you choose to add Windows features that aren't enabled by Microsoft, you're taking additional risks, of course, and the same goes for third party software you might choose to install, using the server as a desktop, etc.
    I'm not on the WHS team, I just post a lot. :)
    • Marked as answer by Adduxi Tuesday, March 2, 2010 8:55 AM
    Monday, March 1, 2010 8:24 PM
    Moderator

All replies

  • Nothing is 100% secure if you have any outside access at all. There's a reason many companies don't permit USB flash devices, foreign computers, etc. on their networks. That said, Windows Home Server is, if you use it as intended, going to be as secure as it needs to be.
    I'm not on the WHS team, I just post a lot. :)
    Monday, March 1, 2010 7:06 PM
    Moderator
  • Ken,

    Thanks for the very prompt reply!
    I fully understand the issues about 100% and I guess I badly worded my request.....
    Is there any sort of "idiots guide" for WHS to harden against outside attack, whilst maintaining it's functionality within the home LAN?
    Thanks in advance, 
    Monday, March 1, 2010 7:57 PM
  • There should be no need to "harden" your server. The only thing that should be exposed on the Internet is the Remote Access web site, and that's pretty secure. If you choose to add Windows features that aren't enabled by Microsoft, you're taking additional risks, of course, and the same goes for third party software you might choose to install, using the server as a desktop, etc.
    I'm not on the WHS team, I just post a lot. :)
    • Marked as answer by Adduxi Tuesday, March 2, 2010 8:55 AM
    Monday, March 1, 2010 8:24 PM
    Moderator
  • Ken,

    Thanks again, you have given me the answers I was looking for.  I don't use the Remote Access feature, so it looks as if WHS is as secure as it can be.
    Tuesday, March 2, 2010 8:55 AM