OT: Server woes...Need advice to set it up right Options

[swood]

Right now we're running (don't laugh) Windows NT with a router that has a static IP. The last straw was on Friday I was typing up a major memo and someone hacked into my pc and took control of it. I ripped the fricken cord out of the wall to end it. Of course my tasks were screwed. (IMG:style_emoticons/default/headbang.gif) (IMG:style_emoticons/default/headbang.gif) (IMG:style_emoticons/default/headbang.gif) (IMG:style_emoticons/default/headbang.gif)

We're getting a new server, need a new OS with some serious security and obviously a new router that's not static. I don't know jack, we have one guy that is in charge of this stuff, but hey, we're just landscape architects, not computer studs.

Any advice? We have about 12 work stations at present. Is Workstation 2003 good for the server and then WinXP for each station?

Oh yeah, currently we're using eTrust anti virus.

Muchos Muchos Grassy Ass for your help.
Steve

[-P-]

I wouldnt worry about the static vs dynamic issue. I would follow everything Rockaria mentioned on your computers.

Explain your setup to us and we can offer advice.

I assume you have a small lan ~5 computers and a server (not sure what it does...file/accounting server?) If it doesnt host a publicly needed service (HTTP, SMTP, FTP, etc...) I would grab a linksys or netgear router for ~100 bucks and plug your cable/dsl/ whatever inet connection you have into it and use NAT. NAT, in the most common use, allows all of your internal computers to use non routable private addresses and share a public address. Unless you specifically forward traffic into your LAN, like you might if your server was say a web server, then chances are good that you have a head start on having a secure network. Combine this with strict email policies (ie no HTML email) and proactive updating of patches and virus definations and you should do alright. If you want something a bit more robust and feature packed look into SOHO firewalls from Sonicwall.