Rafael Soteldo said:
in fact, there's a button, in firewall change settings, called "World Wide
Web Services (http)", isn't it what I was looking for?
--
What difference does it make? Setting a rule to explicitly open port 80
inbound or using the exception rule for http. It's the same thing.
Now, you have to account for security for IIS, O/S, registry, file system,
and user accounts for a machine that is being exposed to the public
Internet, which there entire books out there concerning the security aspect
in this area and professionals can hardly do it.
Hackers look for machines like your machine setting out there, because you
have not done your homework in the security aspect, but you feel the need to
expose the Web server to the Internet.
The machine is nothing but hack bait. The attack and compromise can happen
in a matter of seconds, once you port 80 to inbound traffic, which you have
done. The machine can now be used to attack other networks and Web servers
on the Internet. And you won't even know it's happening.