How to organize a server in the office?

Question

System administration

We purchased a server on a windows server for a web project in a small office. In the Internet office with a static ip address (1 active and 4 standby), there is a managed switch. How to separate the server and the local network, select one ip for the server, and another for the other devices? How to configure server protection, except for closing unused ports? What software to use to protect the server?

Answer 1

Hire an IT specialist.

Answer 2

How to separate the server and the local network - DMZ, firewall and routing
How to separate the server and the local network, select one ip for the server, and another for other devices? - you're on the network for the little ones
How to set up server protection - I don't know what structure you have now, but the class all in one won't work, it's better to buy a firewall. Well, here's a pen for initial digging, iptables, file2ban, the body of the php server itself, cms security.
Perhaps this will help to make inquiries and determine where to dig, otherwise protection is a whole strategy. Solutions are tailored to specific situations and opportunities. In short, you still have to read mana))

Answer 3

a) Remove windows
b) Move the server to a separate network
c) Set up Source based routing
d) Set up a firewall on the router to organize a DMZ
e) Forward the necessary ports
In general, it’s better to rent a Dedik from the same Hetzner for 40-60 euros, beat it into virtual machines on vmware or proxmox and don't beat yourself up. Verified.

Answer 4

Don't listen to mom's hackers.
1. Windows server is a very reliable system
2. Put cisco isr or asa on the border
3. close ports except 443 and 22
4. Configure DMZ according to cisco guides