Groups | Blog | Home
all groups > iis security > january 2004 >

iis security : urlscan and Frontpage


Pat
1/30/2004 6:47:53 PM
Have W2K, IIS5 Frontpage ext,
installed lockdown wizard and URLscan, now FP Clients can not publish

modified Urlscan.ini according to setup for frontpage doc.

getting following when user tries to publish, also does FP need Webdav
to work?

Sent verb 'PROPFIND', which is not specifically allowed. Request will
be rejected.
Sent verb 'PROPFIND', which is not specifically allowed. Request will
be rejected.
Sent verb 'OPTIONS', which is not specifically allowed. Request will
be rejected.
Sent verb 'PROPFIND', which is not specifically allowed. Request will
be rejected.
Sentt verb 'PROPFIND', which is not specifically allowed. Request will
be rejected.
Sent verb 'OPTIONS',

David Martin
1/31/2004 8:58:56 AM
Could these (Options may be FrontPage) be OWA rather than frontpage ? Seacr
KB for URLSCAN and OWA.

(OWA uses more verbs than these)

Dave.

[quoted text, click to view]

Pat
1/31/2004 1:57:32 PM
happens when my customers try and publish. I spoke with the MS IIS
group this morning and made some changes, but still no luck. I am
going to speak with the FP group on monday(they are open M-f 9-5). I
have been going thru the google groups and there seem to quite a few
people having issues with FP and URLscan. in terms of security, how
secure is running FP on a IIS server anyhow? seems you need to open
too much up to have it run?

On Sat, 31 Jan 2004 08:58:56 +0100, "David Martin"
[quoted text, click to view]
jcochran.nospam NO[at]SPAM naplesgov.com
2/2/2004 5:48:33 PM
[quoted text, click to view]

Shouldn't but how are you publishing?

Also make sure you run through:

URLScan:
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/urlscan.asp
http://support.microsoft.com/default.aspx?scid=kb;en-us;318290
http://support.microsoft.com/default.aspx?scid=kb;en-us;307976
http://support.microsoft.com/default.aspx?scid=kb;en-us;817807
http://support.microsoft.com/default.aspx?scid=kb;en-us;325864

Jeff

[quoted text, click to view]
AddThis Social Bookmark Button