and if you're really wise and determined to use a web server, then use apache so you don't have to worry bout it. it's much more configurable anyway... I've gotten lots of CodeRed attempts on my web server, but always denied...

-CaP