Web site checker?

[bgowland]

I'm considering hosting a website on my home machine but I'm ever conscious of making sure my firewall and web server are configured correctly.

Anyone know of any sites out there which offer a 'hacking' test? In other words, I visit the site and provide my domain name and it runs various security checks then produces a report of potential vulnerabilities etc.

Cheers,
Brian

[Torque]

ScannerX for $19.95 http://www.scannerx.com/index.php

or you could try you hand at using Nessus and other free tools...

[martint123]

Shields Up from Gibson research is a general penetration test. It will show if you've left the door open. http://www.grc.com/intro.htm

Mind you., if you just let port 80 in on your router, then that's most of the nasties kept out.

If I was doing it, I'd have a standalone little linux machine hosting it.

[bgowland]

Thanks for the suggestions.

ScannerX looks good although I'd only pay for a one month subscription just to make some final checks.

Nessus also looks good but I'd need to find a friend to host the scanning process from outside.

I tried Shields Up briefly and it guessed that I was sitting behind a NAT router which is pretty cool (I am). It also suggested that initial scans indicated open ports but then found those ports being closed off possibly as a result of my ISP detecting a full scale attack on my IP address. Again, pretty cool on the part of Shields Up and also kudos to my ISP if that's what they were doing.

Linux box - nah. I've got far too many things to think about without having to learn about Linux. Besides - I don't want two machines running 24/7 here.

As it turns out, I've found a web hosting site which will give me free hosting for 12 months - I'll give that a try and let them worry about the security.

Cheers,
Brian

[whurlston]

Sending you a PM.