Excellent point, Dave, thanks. On "4. Block external access to the built-in web server.", does any of cf8 resources/functions/tags depend on it? If not I would simply disable it.
>The CF Administrator is just a web application. You can control or prevent >access to web applications through configuring your web server. > >Typically, I do something like this: > >1. Install CF using the built-in web server (listening on TCP/8300 or >TCP/8500). >2. After installation, configure an external web server to use CF. >3. Configure the external web server to disallow access to >/CFIDE/administrator. >4. Block external access to the built-in web server. > >Alternatively, I might use a separate virtual web server to host the CF >Administrator, if for some reason I don't want to use the built-in web >server. > >Dave Watts, CTO, Fig Leaf Software >http://www.figleaf.com/ > >Fig Leaf Training: Adobe/Google/Paperthin Certified Partners >http://training.figleaf.com/ > >WebManiacs 2008: the ultimate conference for CF/Flex/AIR developers! >http://www.webmaniacsconference.com/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:298225 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
