all groups > iis security > september 2003 > threads for september 22 - 28, 2003
Filter by week: 1 2 3 4 5
Network POP UP ads.. New type of SPAM
Posted by mjmonschein NO[at]SPAM msn.com at 9/28/2003 5:11:50 PM
I've been hit by this Website over and over and over and
over.... http://www.destroyads.com/ They tell me for
$24.95 I can download a software to prevent such popups.
What kind of scam is this? They are the only such company
that I have dealt with that is abusing the Networking
features in... more >>
Messenger Service Pop Up Ads
Posted by Ella Rae Adams at 9/28/2003 4:57:43 PM
Does anyone know how to stop messenger service pop up
ads? I did not recieve these ads when I had Windwos 98
operating system. Thanks for anyone's help.... more >>
spyware
Posted by kshrum at 9/28/2003 1:09:10 PM
Clearfind.com has set itself as my homepage and I cannot
remove it. In internet options my set homepage option is
greyed out. How do I get rid of it?
Thanks... more >>
Try on this patch
Posted by Howard Andrews at 9/27/2003 6:44:36 PM
Microsoft Customer
this is the latest version of security update, the
"September 2003, Cumulative Patch" update which resolves
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
as well as three new vulnerabilities.
Install now to continue ke... more >>
I tried to post a message a few minutes ago and nothing shows
Posted by Hazel at 9/27/2003 5:49:27 PM
Even though Microsoft said my message would appear in a
few seconds, nothing showed in several minutes. Wonder
what happened? I've had three messages on my Yahoo
account from Microsoft. The subject telling me to use the
patch immediately was preceded by icon that has paperclip
on a recta... more >>
How do I know if this email is legitimate Microsoft email?
Posted by cyberpltops975 at 9/27/2003 5:42:08 PM
In my email inbox on my Yahoo account, I have had three
messages telling me to use the Microsoft patch right away.
The subject was preceded by the icon paperclip like one on
a square white rectangular box. Since I understand
Microsoft has been attacked by the awful virus, I am
checking to ... more >>
DCOM Error
Posted by Bryan at 9/27/2003 11:32:40 AM
DCOM got error "Overlapped I/O operation is in
progress. " and was unable to logon
..\IWAM_SINDMSPGEN01 in order to run the server:
{F21BD7BE-1CF4-41F2-9C75-E3841A578F45} ---dcom
Has anyone seen this error before and know possible causes?... more >>
certificate
Posted by John Hale at 9/27/2003 9:16:45 AM
I installed a certificate for a public servers ssl pages,
from a "unknown" server somewhere else.
I trust the cert because I generated, but the message
continues to pop-up and it says: issuer not trusted.
These computers don't know each other, etc. Is there a
way to do this without pa... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Outlook Express 6
Posted by Brian Haller at 9/27/2003 7:12:16 AM
I recently started using Outlook Express 6 for e-mail and
have been having problems with OE removing attachments
(eml and pdf extensions. How can this be managed?... more >>
unable to receive e-mails for aol users
Posted by terry at 9/26/2003 5:07:40 PM
Help!.
I was going though junk mail and I hit the button saying
not to accept anything for addresses ending with aol.com
I did not mean to hit that one I wanted to block mail
coming from certain junk mailings. How can I get mail
from my friends that use e-mail through aol? ... more >>
pop up hell
Posted by michelle at 9/26/2003 2:11:39 PM
PLEASE HELP ME STOP THESE POP UPS. I AM A NETWORK ADMIN
AND I CAN NOT GET RID OF THESE POP UPS. I AM GOING CRAZY.
I WISH I COULD SUE SOMEONE FOR THE DISRUPTION TO OUR
COMPANY. UNABLE TO WORK... more >>
Cannot connect to Site once SSL installed
Posted by BG at 9/26/2003 12:00:28 PM
I recently installed SSL using the MS CA Services. When I
connect from a client, it tells me I need to use https.
So, I do, and I get parge not found. The IIS log shows
error 403. I have the diagnostic tool and when I run the
simulated handshake, i get
System time: Fri, 26 Sep 2003 18:35:... more >>
Remote access to a web folder
Posted by John Kievlan at 9/26/2003 11:51:02 AM
I need to be able to use Visual Studio .NET on my workstation to work with projects in a web folder on our Windows 2003 server over the internet (TCP/IP), since the web server is *not* networked to the office. Can I do that? If so, how? I really don't know much about Windows 2003.... more >>
SSL on IIS 5.0
Posted by news.microsoft.com at 9/26/2003 11:44:08 AM
Hi,
I have two sites with different IPs bind to them. Can I install different
certificates on these two sites. If anyone know pls tell me the detailed
procedure. I have tried but its not working. Only one site is working but
the second one gets the page of the first site i configured.
Thank... more >>
URLscan 2.5 log entry odditity
Posted by Roger Abell at 9/26/2003 11:24:44 AM
As seen in URLscan log of an IIS 5 at all current service
[09-22-2003 - 23:42:46] Client at 213.31.11.55: Error 122 occurred getting
verb. Request will be rejected.
Is this the same 122 as net helpmsg describes as an exception due
to an "undersized data area passed to system call"
(i.e. if so... more >>
renewing SSL on our IIS 4.0 on NT for webmail.
Posted by rob lin at 9/26/2003 10:20:15 AM
Need some help on this one. Currently we're running our webmail on a NT
4.0 box with IIS 4.0 our certificate is about to expire with verisign,
and we want to set this up ourself. We also have certificate server on
MMC 1.2 service pack 3 running on our sql box on a different domain.
Thanks,
... more >>
Conect to IIS remotely
Posted by MS News at 9/26/2003 10:08:10 AM
I have a utility the adds websites in IIS from a remote computer. Can
someone tell me what policies, permission, or whatever I need to change to
be able to connect to the IIS from a remote server.
... more >>
spidersearch.com Bar
Posted by jeff king at 9/26/2003 7:11:34 AM
how do I eliminate this??... more >>
Linux To IIS
Posted by rajaher NO[at]SPAM hotmail.com at 9/26/2003 2:00:10 AM
HI,
We are trying to transfer few websites from Linux hosting
to IIS ( On windows 2003).
Some of the users on these sites get authenticated against
linux '.BDB' file ( which holds the info about username and password)
Once this we sites are transfered to IIS ,,is there a way to transfer
th... more >>
Question About Cyber Sentinel
Posted by Benny Perales at 9/25/2003 11:27:28 PM
Many times when I'm accessing the internet, my access is
interrupted by this error:
"CYBER SENTINEL - VIOLATION DETECTED
....enter password to override Cyber Sentinel"
I'm not sure which program generates this security
message, but I'd like to know where I can find (or
create) the pa... more >>
IIS 5 SSL Failure after SP4??
Posted by Blah at 9/25/2003 8:56:54 PM
Hi,
After installation of SP4 on IIS5 (win2k) SSL no longer functions
consistantly. It will load https pages occasionally (from outside clients)
but normally just gets a DNS error. SSL pages will never load browsing from
the server. Non-ssl the site will work ok both on the server's browser and
... more >>
Anti-virus software on Win2K Web server
Posted by Steve at 9/25/2003 6:38:07 PM
Hello,
I just noticed that our dedicated server doesn't have any anti-virus
software running on it.
Before I run out and get Norton's Anti-Virus Corporate Edition, is it a good
idea to put anti-virus software on a web server (we do some uploading of
..doc and .xls files for our user base to... more >>
SSL for Exchange Cluster
Posted by Brad at 9/25/2003 1:07:38 PM
I am wanting to secure a new Exchange Environment.
Active/Passive Exchange Cluster, so can I bind the SSL
cert to server 1 and server 2 under the same DNS or do I
need to purchase a cert for each server. with the same DNS?
Thanks! ... more >>
Receiving Unspecified Error...
Posted by David Lozzi at 9/25/2003 1:01:14 PM
Unspecified error
C:\INETPUB\WWWROOT\WELCOME\../common/adovbs.inc, line 4
And line 4 is this
Connect.Open "database"
Its happening across the board too, on each database on this server. Same
errors, but connecting to different databases.
Any ideas?
--
David Lozzi
Associated Busine... more >>
Certificate missing when moving from one server to another
Posted by Viba Fima at 9/25/2003 12:42:04 PM
I am retiring an old IIS server and need to move its Web certificate to
another server. I follow Microsoft directions to use the Certificate MMC to
export, and on the new server, use the Certificate MMC to import. I check
the certificate info and everythink looks fine, with intended use as "Ser... more >>
** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.09.25
Posted by Karl Levinson [x y] mvp at 9/25/2003 11:27:20 AM
Before you post a question to a Microsoft.public.*.security newsgroup, note
that your question may already be answered below:
Answers to Top Frequently Asked Questions:
http://securityadmin.info
My question is not mentioned below. How do I get an answer immediately,
with no waiting?
http:... more >>
IIS with DOTNET 1.1
Posted by Dimitrie at 9/25/2003 11:26:52 AM
I would like to install the DOTNET 1.1 FRMWRK on a production machine (IIS5
Win2k). It runs ASP and it's locked down with the IIS 2.1 LockDown Tool and
a bunch of few other tweaks. The intent is to start porting old ASP scripts
to ASPX. No web services intended.
By simply installing the framew... more >>
email received not sure if real
Posted by SE at 9/25/2003 10:45:31 AM
Microsoft Corporation Public Assistance"=20
<qospmbsbnraha@updates.com> I received this emaill with=20
an attachment to download, but was not sure if it is=20
really from Microsoft as I update regularly and there are=20
no updates for windows see below for content of message
From: "Micros... more >>
Certificate / SSL
Posted by John Hale at 9/25/2003 7:13:40 AM
I have a website and require SSL for some of the content.
I installed a certificate, and each time a user connects,
the certificate re-maps or has to be accepted each time.
IS there a way which we can require acceptance only once,
or can we have ssl without a certificate?
Any help is a... more >>
Certificate services issues
Posted by David M at 9/24/2003 11:08:45 PM
I am attempting to bring up certificate service to create a couple of
certificates to use for internal testing of web pages before moving them to
public locations where Verisign certs will be used. I initially installed
certificate services with a standalone Certificate Authority on an AD server... more >>
Backup "pending request"?
Posted by Mark at 9/24/2003 10:10:33 PM
Apologies for the long posting. :-)
I'm about to apply for a certificate for an IIS server. Whilst the CA is
cranking out the certificate, I'm having a play with a test certificate
using the _same_ web site by creating my own CA on MS Cert Authority. I
notice that in IIS I can only have one pe... more >>
Authentication without anonymous
Posted by Pascal Fluck at 9/24/2003 10:25:08 AM
Hello,
I'm doing an application ASP and she have her own login. Now I'm working to
do "autologin" for user who are in the same domain (iis authentication). It
work fine...
But now, when a user try to launch application from external domain, I would
the application login appear without stand... more >>
ASP Pages not displaying?
Posted by A at 9/24/2003 9:54:11 AM
Hi All,
I'm having a problem whereby when I try to view asp pages I get an error 404
page cannot be displayed. I've tried restarting IIS Admin service, default
website but to no avail.I've been using IIS for a while now but I've never
come across this before. I might add that this is the first t... more >>
autologin for php
Posted by Quy Ngo at 9/24/2003 9:42:07 AM
is there any way that php can get the user login and authenticate using iis?
... more >>
reply difficulties
Posted by Jenny at 9/24/2003 5:19:54 AM
Does anyone know why I would not be able to reply to to
others e-mails or have them reply to me. There are no
error messages. I have bellsouth as my ISP. Two e-mail
accounts exist, bellsouth and bww. I receive both on
outlook express, but only receive replies on bellsouth.
I thank anyon... more >>
UseHostName - Is this a valid IIS 6 setting?
Posted by Ray at 9/23/2003 7:11:40 PM
I've configured the metabase (IIS 5) so the server would return it's
DNS host name vs. it's IP address when performing redirects. Is the
"UseHostName" setting a valid metabase entry for IIS 6.0? The MSDN site
only lists IIS 5.0 & 5.1.
TIA
Ray
http://msdn.microsoft.com/library/default.... more >>
removing Content Advisor password
Posted by Juanita at 9/23/2003 6:57:50 PM
I need to remove my content advisor password, everytime I
try to display a web page I get no page to display go to
my content advisor. (Do not have a glue what it is)
Thanks for all you help... more >>
oe attachments
Posted by roger at 9/23/2003 3:04:26 PM
how do I enable attachments not be removed by oe? thanks... more >>
Valid Critical Pack?
Posted by COB at 9/23/2003 2:41:26 PM
Is the recent e-mail message from Microsoft with the
attached "installer211.exe" valid? Should it be
downloaded?... more >>
Authenticating into two directories on same site
Posted by EN at 9/23/2003 2:01:46 PM
I have a webserver, windows 2000 IIS 6, and in the layout, I need to have
users
authenticate into two different web folders on the same site. The users can
authenticate
fine into one, but once they go and try to authenticate into the other part
of the site
that is secure, they get a "Page can... more >>
multiple password prompts in web site
Posted by Richard at 9/23/2003 1:14:51 PM
I am relatively new to this.
I am setting up a personal website at home. I have a link
within my default page, to a "members" page. This member
page, is within a folder under the web site folder, and I
have chanegd the NTFS rights so only the administrator and
the system have full rights... more >>
New virus threat
Posted by Geoff Molloy at 9/23/2003 12:20:52 PM
Just received an email, allegedly from Microsoft, with a heading 'last
critical update'
Should anyone recieve one of these, Microsoft DO NOT send out updates by
email.
These messages contain a virus
You have been warned.
Best wishes and happy surfing
Geoff
*** Sent via Developers... more >>
Block mdb downloads
Posted by Dan Getz, Jr. at 9/23/2003 11:15:33 AM
We have an interesting scenario in which we need to block access to
downloading Access databases (mdb). Before you suggest that we just put
them in a folder not accessable via the web, that's not possible. Is there
any way (short of setting permissions on every single database) that we can
blo... more >>
dropped packets
Posted by brad grim at 9/23/2003 11:07:01 AM
What is an echo request?... more >>
IIS W3SVC1 Log File with something else from buffer
Posted by Ben at 9/23/2003 9:33:09 AM
Hi all,
Sometime I found on my IIS Log File some of other text added in. I think the
text from the buffer.
The text may be a part of email I was reading, or a part of data I copy/past
on some word documents.
My system is win2000 Pro. with all up-to-date MS Critical Update.
My Norton An... more >>
IIS LockDown Delete my site configuration
Posted by Andres Betancur at 9/23/2003 8:59:32 AM
Hi all,
I run the iis lock down on my web server and aparently
everything goes fine.
Then when i browse to my default web site it doesn't
appears, the i move to the Internet Service Manager and i
didn't find my site, the tool deletes it.
Someone with a similar experience ?
REgards.... more >>
cannot log on to secure sites
Posted by vicki at 9/23/2003 7:33:44 AM
HELP! I am unable to log into secure websites, pay bills
on line, college secure sites, etc. The computer
specialist told me I downloaded a corrupted file from
Microsoft between September 11 and Sept 18 that was an
update for a root certificate. He told me I had to take
my computer back... more >>
How to get out of this error message "Database or object is read-only"
Posted by Maple at 9/22/2003 5:03:03 PM
After I moved my ASP pages and an Access database from
PWS in NT 4.0 to IIS 5.0 in XP Pro, I can't edit data in
the database through the ASP web application.
The error type is...
Microsoft JET Database Engine (0x80040E09)
Cannot update. Database or object is read-only.
However, the datab... more >>
Is "Certificate Trust Lists" (CTL) an IIS-only concept?
Posted by Ohaya at 9/22/2003 4:31:09 PM
Hi,
This should be a simple question (for once :)!). I was wondering, is
the concept and/or term "Certificate Trust Lists" or "CTL" something
that is IIS-only? Or is it a general PKI concept/term?
I'm just curious because I've scanned through a number of generic
PKI-specific books, and ... more >>
CDO access denied
Posted by mar10 at 9/22/2003 2:49:12 PM
Where do i need to go to correct this error in my ASP
APP. The actual error is:
Error
MS VBScript Runtime (0x800A0046)
Permission denied.
appfolder/appname/line number..(which is the cdo.send)... more >>
First time post - Configuration Guide for IIS / Win2K
Posted by hjdebruyn NO[at]SPAM home.nl at 9/22/2003 2:49:07 PM
Hi there everyone,
The question I have is rather simple, is there somewhere on the net an idiot
(fool) proof configuration guide to host websites on a Win2K IIS webserver?
There are lots and lots of sites that can guide me to security issues in IIS
or on Win2K according to my wish to host we... more >>
allow .config downloads
Posted by Bill at 9/22/2003 12:09:33 PM
I have a .net client with a .config file that I would like
a user to download. IIS seems to restrict downloads of
files with a .config extension. I would like to allow
the .config file to be downloaded from this folder. Can
anyone tell me how?
Thanks
Bill... more >>
personal privacy policy
Posted by mark at 9/22/2003 9:04:45 AM
Hi,
I'm trying to insert a compact privacy policy string into
the custom HTTP header of a site running on IIS6 on
Server2003.
The problem is that the input text box is truncating the
compact policy string. It looks like a max length
property is being applied to the input box. This wa... more >>
IWAM account
Posted by Srini at 9/22/2003 7:44:18 AM
Could someone explain me how IWAM account is used. As per
my understanding, if a COM component is called by ASP
page, The process will be owned by the user running the
ASP page ( IUSR or local user depending on the
authentication ). But how IWAM account is used to run COM
components? Thank... more >>
|