Groups | Blog | Home
all groups > iis security > december 2004 >

iis security : URLscan.ini - "+" in subject field


rrwillu
12/3/2004 8:03:02 AM
Friends,

We have IIS 6.0 and installed URLSCAN 2.5. In URLscan.ini [DenyUrlSequence]
is empty.

We couldn't open any messages that has "+" in the subject field.

Not jeopardizing other characters/symbols, how i can include just "+" in url

I checked the log file and it says "URL normalization was not complete after
one pass..."

Thanks in advance.
Wade A. Hilmo [MS]
12/6/2004 8:37:44 AM
Hi rrwillu,

The article at the following link tells specifically how to use UrlScan with
Outlook Web Access. The specific thing that applies to the '+' character is
setting VerifyNormalization=0 in the UrlScan.ini.

I hope that this helps,
-Wade A. Hilmo,
-Microsoft

[quoted text, click to view]

Richard
12/6/2004 9:05:09 AM
Thank you Wade for your response.

I have did research and have already put verifynormalization=0 and its
working fine. Since we are running W2k3 and E2k3 on OWA servers. This setting
should be "safe" i believe.

[quoted text, click to view]
AddThis Social Bookmark Button