Hiya! Guess I'm late, Quacking Plums has already nailed it!
If I can hazard a guess at your hardware setup, I cannot stress highly enough that you NEED a hardware firewall with a secure DMZ for your web server. If you are running even faintly public web services (i.e. anything with a FQDN on port 80), then your 'main' or workstation PC should NOT be your web server machine.
There are many products that can deliver dedicated firewall functionality, but if you go to www.smoothwall.org you can download a limited version of the Smoothwall firewall for free. All you need then is a fairly basic PC to act as a dedicated firewall device, and then you can protect both your web server (DMZ) and your workstation separately. I would point out one thing in connection with this software... it's FREE, i.e don't expect support beyond the supplied documentation. Having said that, if you've already got a web server running then you most probably can get all you need out of the supplied info and understand the issues involved.
hth,
QP - anything to add?
If I can hazard a guess at your hardware setup, I cannot stress highly enough that you NEED a hardware firewall with a secure DMZ for your web server. If you are running even faintly public web services (i.e. anything with a FQDN on port 80), then your 'main' or workstation PC should NOT be your web server machine.
There are many products that can deliver dedicated firewall functionality, but if you go to www.smoothwall.org you can download a limited version of the Smoothwall firewall for free. All you need then is a fairly basic PC to act as a dedicated firewall device, and then you can protect both your web server (DMZ) and your workstation separately. I would point out one thing in connection with this software... it's FREE, i.e don't expect support beyond the supplied documentation. Having said that, if you've already got a web server running then you most probably can get all you need out of the supplied info and understand the issues involved.
hth,
QP - anything to add?