Username
|
The username of the administrator.
admin is the default username.
|
Password
|
The password of the administrator.
admin is the default password.
|
Address
|
The IP address or the host name to listen to.
* indicates any ip address or host name.
* is the default for iServer.
|
Port
|
The port number to use, a value from 1 to 65536.
8080 is the default for iServer.
80 is the default for Web Servers.
Only one application at a time can use any given port number.
|
Default File
|
The name of the default html document to retrieve, if non was specified.
index.html is the default for iServer.
|
Connections
|
The default number of threads to startup.
25 is the default for iServer.
The number specified must be greater than or equal to 5.
|
Maximum Connections
|
The maximum number of threads to startup.
50 is the default for iServer.
The value must be greater than or equal to the number of connections.
|
Backlog
|
The maximum number of pending request to queue.
50 is the default for iServer.
The number specified must be greater than or equal to 0.
|
Timeout
|
The number of milliseconds to wait for the client to respond before closing
the connection.
300000 milliseconds, 5 minutes, is the default for iServer.
If -1 is used the connection will never to timeout. Using this
value is dangerous and opens the server to denial of service attacks.
If the value is less 1000 then 1000 will be used.
|
Shutdown Delay
|
The number of seconds to wait for requests being processed to complete before
shutting down the server.
60 seconds is the default for iServer.
-1 can be used to wait for all requests to finish processing. Using
this value may result in the server hanging while trying to shutdown waiting
for a request the will never complete.
|
Keep Alive Enabled
|
Used to indicate whether the connection should be kept opened between requests.
Yes is the default for iServer.
Setting this value to No may have a negative impact on performance.
|
Keep Alive Requests
|
The maximum number of consecutive requests that will be allowed before the
connection is closed.
5 is the default for iServer.
-1 can be used to always keep the connection alive. Using this value
is dangerous and opens the server to denial of service attacks.
The number must be at least 5.
Setting this value too large may result in denial of service.
|
Keep Alive Timeout
|
The maximum number of seconds to service a client requests before clossing
the connection.
30 seconds is the default for iServer.
-1 can be used to always keep the connection alive. Using this value
is dangerous and opens the server to denial of service attacks.
The number must be 15 or more seconds.
Setting this value too large may result in denial of service.
|
Directory Access
|
Whether to allow directories to be displayed.
No is the default for iServer.
Setting this value to Yes is potentially a security hole.
iServer uses the template directory.html in
installdir/html/ when display directories, where
installdir is the directory where iServer was installed.
|
Shell Access
|
Whether to allow CGI scripts and SSI #exec to have shell access.
No is the default for iServer.
Setting this value to Yes is potentially a security hole.
|
Security Enabled
|
Whether to check if a client can access resources being requested.
Yes is the default for iServer.
Setting this value to Yes may have a negative impact on performance.
|
DNS Lookup
|
Whether to lookup the name of the remote client.
If set to No then the IP address of the remote client will be used.
No is the default for iServer.
Setting this value to Yes may have a negative impact on performance.
|
Connection Pools Enabled
|
Whether to enable defined connection pools.
Yes is the default for iServer.
Setting this value to Yes may improve performance.
|
Servlet Chaining
|
Whether to allow Servlet chaining.
No is the default for iServer.
Setting this value to Yes may have a negative impact on performance.
|
Remote Administer
|
Whether to allow computers other than localhost (127.0.0.1) to administer
iServer.
Yes is the default for iServer.
Setting this value to Yes is potentially a security hole.
|
Administrators should immediately change the default Username/Password from
the Server form [Login > Monitor > Control Panel > Manage >
Server].
Username/Password should not be any obvious word, easily guessed terms,
should be at least 8 characters and should contain letters,
numeric and symbols.
Additionally Username/Password should be kept private, with limited
controlled disclosure and should be changed frequently.