Free stunnix advanced web server software for linux

Run a web server inside LAN is a simple script to run a WWW server inside a Local Area Network. Run a web server inside LAN script assume all iptables features are compiled statically in the kernel, or all modules are loaded.

Otherwise you may encounter some surprises trying to utilize the more featureful and creative commandlines that Ive come up with.

Sample:

#external and internal interfaces
EXT=eth0
INT=eth1

# clear everything, and create my cascading chains
iptables -F
iptables -N e0
iptables -N tcpin
iptables -N udpin

# e0 is the name of our chain for eth0
iptables -I INPUT -i $EXT -j e0

# OUTPUT Chain
iptables -A OUTPUT -o $EXT -j DROP -p icmp --icmp-type ! echo-request

# remote gnutella queries were really pissing me off one day
# iptables -A OUTPUT -o $EXT -j DROP -p tcp ! --syn --dport 6346
# iptables -A OUTPUT -o $EXT -j DROP -p tcp ! --syn --sport 6346

# $EXT Chain
# a single rule to accept SYN Packets for multiple ports (up to 15)
iptables -A tcpin -j ACCEPT -p tcp --syn -m multiport --destination-ports 873,993,995,143,80,113,21,22,23,25,53

# stateful connection tracking is wonderful stuff
# ESTABLISHED tcp connections are let through
# If we send a SYN out, the ACK is seen as RELATED
# then further communication is accepted by the ESTABLISHED rule
iptables -A e0 -j ACCEPT -m state --state ESTABLISHED
iptables -A e0 -j ACCEPT -m state --state RELATED

# certain ports I simply DROP
iptables -A tcpin -j DROP -p tcp --syn -m multiport --destination-ports 6346,139

# UDP rules...
iptables -A udpin -j DROP -p udp -m multiport --destination-ports 137,27960

# I run a DNS server, so we must accept UDP packets on port 53
iptables -A udpin -j ACCEPT -p udp -m state --state NEW --destination-port 53

# lets log NEW udp packets on ports 1024:65535, then let them through
iptables -A udpin -j LOG -p udp -m state --state NEW --destination-port 1024:65535 --log-level debug --log-prefix UDPNEW --log-ip-options
iptables -A udpin -j ACCEPT -p udp -m state --state NEW --destination-port 1024:65535

# lets log NEW tcp packets on ports 1024:65535, then let them through
iptables -A tcpin -j LOG -p tcp --syn --destination-port 1024:65535 --log-level debug --log-prefix TCPNEW --log-tcp-options --log-ip-options
iptables -A tcpin -j ACCEPT -p tcp --syn --destination-port 1024:65535

# lets log INVALID or NEW tcp packets on priveleged ports, then DROP
# (remember I have certain ACCEPT rules higher up the chain)
iptables -A tcpin -j LOG -p tcp -m state --state INVALID,NEW --destination-port 1:1023 --log-level warn --log-prefix TCPPRIV --log-tcp-options --log-ip-options
iptables -A tcpin -j DROP -p tcp -m state --state INVALID,NEW --destination-port 1:1023

iptables -A e0 -p tcp -j tcpin
iptables -A e0 -p udp -j udpin
iptables -A e0 -j LOG --log-level debug --log-prefix NETFILTER --log-ip-options -m state --state INVALID,NEW
iptables -A e0 -j DROP

# NAT Rules
# I run a web server inside...
iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 80 -j DNAT --to-destination 192.168.1.4:80

LiteSpeed web server is an Apache interchangeable, full-featured high performance, secure HTTP server specifically engineered from the ground up with security and scalability in mind.
LiteSpeed Web Server is engineered to be Apache interchangeable, which means LiteSpeed has all the flexibilities that Apache has, but in much faster manner, such as distributed configuration .htaccess support.
The most commonly used Apache modules have been implemented in LiteSpeed with similar functionality and configuration, but completely different design and implementation.
Currently, LiteSpeed uses Apache compatible configuration for .htaccess and URL rewriting and eventually LiteSpeed will be able to use Apaches configuration file directly. This makes your switching between Apache and LiteSpeed very easy and risk free.
LiteSpeed Web Server has superb performance. Our measurements shows that it is more than 6 times faster than Apache, beating other lightweight content accelerators, such as thttpd, boa and TUX when serving static content, plus up to 50% increase in PHP performance than that of Apaches mod_php and more than doubled CGI/Fast CGI performance.
When you compare LiteSpeed Web Server to highly regarded and highly priced Zeus Web Server, you will find a lot of things in common: similar architecture and similar feature set, including some of the advanced features like web administration interface, MS FrontPage support, URL Rewriting, .htaccess and LDAP authentication. The biggest difference is that LiteSpeed is much more affordable, actually, it could cost you nothing.
LiteSpeed Web Server is also a real-world proven high performance content accelerator, compression proxy, and application security gateway leveraged by its highly scalable, low latency proxy engine.
With the combination of ease of use, tight security, outstanding performance, scalability, and reliability, LiteSpeed Web Server is the ultimate web server you ever need!
Main features:
- Backward compatible with HTTP/1.0
- Chunked Transfer Encoding
- Basic Authentication (htpasswd and LDAP backend)
- Entity Tag
- Range/Multi-range Request
- Static and dynamic content compression(gzip)
- CGI/1.1
- Fast CGI
- PHP (through Fast CGI interface), compatible with third party PHP Accelerators.
- JSP/Servlet (interface to back-end Servlet engine)
- Transparent reverse proxy (interface to back-end web server, application server)
- URL Rewriting is fully compatible with Apaches configuration
- Supports content publishing with MS Frontpage client.
- Supports IP based and name based virtual hosting
- Apache compatible distributed per-directory Access Control and Authentication configuration
- High performance Secure HTTP (HTTPS): supports SSLv2, SSLv3 and TLSv1
- Access Control at server, virtual host and directory (context) level
- File system protection
- HTTP Authentication
- IP level throttling (Bandwidth and Request Rate)
- Comprehensive IP level connection accounting
- Hotlink protection
- Strict HTTP request checking
- Comprehensive protection for static files
- External application firewall for dynamic content
- CGI resources consumption limit
- CGI suEXEC excution and chroot
- Chroot whole server process[Professional Edition only]
- Watch dog and Instant recovery maximizes up-time
- Graceful shutdown, all requests in process will be completed.
- Runs completely in the user space, OS reliability is not affected
- CGI, Fast CGI and servlet engine run in standalone processes, the reliability of the web server is not affected by third party software.

Cheyenne Secure Web Server (SWS) is a comprehensive enterprise solution for Apache server. Cheyenne Secure Web Server combines http firewall, JAVA, PHP, PERL and a domain control system with Apache HTTPD platform.

Virtual Appliances are nano-sized virtual machines with Web user interfaces for deploying instant infrastructure and applications. They are Gentoo Linux based and optimized for use in VMware and Xen.
Virtual Appliances are free to download and use, and you can choose from a simple Web server, an Apache Tomcat server, a MySQL server, and a PostgreSQL server.
Enhancements:
- This Virtual Appliance server runs Cacti, which is a network graphing solution based on RDDTool.
- It is used to provide real-time and historical visualization of network activities.
- The Cacti Server includes onboard MySQL and PHPmyAdmin in a 40MB download package to run under any VMWare product or VirtualPC.
- As with other Virtual Appliances, this Cacti Server can use Virtual Hard drives automatically, which allows for a database of any practical size.

DeniX Server OS is an independent Linux based distribution built from scratch by Denis Salmanovich. They aim to offer a user-friendly full-featured server operating system, pre-configured, well structured and easy to work with, and filled with the latest stable versions of Linux apps.
Its easy to install and configure. Every package is downloaded from the authors source and compiled when installed.
Main features:
- Domain Controller
- ADSL/CABLE Router (PPPoE)
- Network Firewall
- Anti Virus Gateway
- Anti Spam Gateway
- Mail Server (local & external) + Web Mail
- Calendar Sharing Support
- Network File Server
- DHCP Server
- TFTP BOOT Server
- WINS Server
- FTP Server
- VPN Server
- DNS Server
- DDNS Server
- MySQL Server
- HTTP Apache Server
- Remote Backup Solutions
- Remote control and administration
- Print Queue Server
- Proxy Server

iConnect Portal Server is a data presentation and delivery system for building enteprise portals over the iConnect Web Application Server.
Users of the platform have a customized single point of access to the companys information system and resources.
Main features:
- Grid / slots / blocks logic
- Modular structure
- Encapsulation of pages, blocks and classes inside modules
- Separation between view and model
- PHP as template engine
- Localized templates
- Grid themes
- Sessions

Caravan Business Server is an extremely easy to use comprehensive development and deployment framework which has been used to build Enterprise wide, mission critical Web-based applications.
It includes, as a seamless integrated package, an easy to use Scripting Language, Search Engine, Database Engine, a Web Server and a Communication Server, which makes it a 1-Tier Architecture.
Caravan Business Server is currently available on Linux. Once an application is developed on any OS, the same can be simply redeployed on any other OS without making any changes.

SystemSearcher project is yet another Linux security scanner.
SystemSearcher is a Linux security scanner written in Perl. It scans single hosts or subnets for anonymous FTP servers, TFTP servers, SMTP servers which allow relaying, SSH servers, Telnet servers, NFS servers with exported directories, mail servers, Web servers (HTTP/HTTPS), well- known trojan ports, and exploitable CGIs.
You can also scan a list of specific servers and specific ports. It uses non-blocking socket communication with a 3-second socket timeout.
It can also scan for proxy servers which are open to the world (on port 80,8080,1080, or 3128), and SMB servers or Windows boxes sharing directories.
Main features:
- Scan a network segment
- Scan for anonymous ftp
- Scan for TFTP server
- Scan for SMTP server which allows relaying
- Scan for SSH server
- Scan for Telnet server
- Scan for Web server (HTTP and HTTPS)
- Scan for proxy server open to the world (Ports 80.8080.1080,3128)
- Scan for NFS server and exported directories
- Scan for Mailservers belonging to your target
- Scan for SMB server or windoze boxes and shared directories
- Scan for exploitable CGIs using whisker (programmed by Rain Forest Puppy)
- Scan for well known Trojan ports
- Scan for one or more open ports