all groups > iis security > july 2004 > threads for july 15 - 21, 2004
Filter by week: 1 2 3 4 5
IIS Hack : Anyone explain cause...
Posted by Team Macromedia at 7/21/2004 7:30:00 PM
Hey All,
We recently had one of our IIS servers hacked (not mission critical
server, so we were not too bothered) in which one of the sites default
document was either hacked or replaced with a file stating the following
: "SORRY ADMIN SPYKIDS OWNZ YOUR WINDOWS f*** you USA irc.brasnet.org ... more >>
Blocking worms by config of Default Web Site?
Posted by Need Help at 7/21/2004 7:45:27 AM
Hi Folks, first post. Does anyone know, is it possible
to block automated worms by locking down the default
website completely by blocking all incoming IP's, yet
having subdirectories or virtual directories under the
default web that may be more open to others? My guess is
the worms coul... more >>
spy-ad ware
Posted by fede at 7/21/2004 7:23:07 AM
cerco qualcuno che possa aiutarmi a risolvere il problema
relativo al soggetto
... more >>
Service Unavailable Error
Posted by Sharefred at 7/21/2004 6:01:45 AM
I am having problems with an error " Service
Unavailiable", what can I do to correct this condition?... more >>
IIS 4.0 fails after MS04-021
Posted by buchhei NO[at]SPAM yahoo.de at 7/21/2004 3:03:24 AM
After applying the security Patch MS04-021 (841373)
on two (!) NT4.0 SP6a Servers (German)
the IIS 4.0 Services (ftp, www) failed to start on both servers.
The error message says "Modul nicht gefunden" ("Module not found")
error number 0126 and 7023.
There is no way to start the services.
... more >>
Unable to re-run or manually remove the IIS Lockdown Tool
Posted by sstuart NO[at]SPAM 80-20.com at 7/20/2004 9:52:10 PM
The tool was installed. An unrelated problem led to the log file being
purged. As a result, the tool can not be re-run. The tool detects that
it has been installed and attempts to repair its prior action, but
fails as follows:
Starting undo...
Backing up IIS metabase...
Unable to backup IIS ... more >>
MaxClientRequestBufferData or MaxClientRequestBuffer workarounds?
Posted by K7 at 7/20/2004 1:59:20 PM
For the WebDav problem Microsoft posted a workaround of adding a key:
MaxClientRequestBuffer with a value of 16384. (Ms03-007). Now in
http://www.microsoft.com/technet/security/bulletin/ms04-021.mspx they have
added a key MaxClientRequestBufferData with a value of 16384. Is this a
misprint or a... more >>
Getting Access Groups for a Folder
Posted by Mandy B at 7/20/2004 10:48:08 AM
I'm using C# to try figure out which of the user groups I
have created on my server are attached to a folder in
order to decide if I want to display them to the user or
not. I can tell what groups the user is in, but I can't
tell which groups belong to the folder to compare the
two. Has ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Web Services
Posted by fee at 7/20/2004 8:32:53 AM
Could someone explain to me what web services are? I am
tryimg to understand what they are and how they work... more >>
Upload info
Posted by Bruce R at 7/20/2004 6:21:05 AM
Is there anyway you can tell what site is uploading from
your computer. I have removed file sharing programs from
my PC, I run AD Aware-Zone Alarm yet there is still data
going out.... more >>
Should I install my own CA for use with OWA?
Posted by mmac at 7/19/2004 10:06:57 PM
Using win2k, exchange 2k.
I need to enable Outlook Web Access for my traveling people, I understand
that to do this properly I need to use using SSL. I know next to nothing
about this subject so I am running through a technet article on the subject
and here are the first questions that come to ... more >>
Issues with 8.3 notated files and IIS Security
Posted by News User at 7/19/2004 12:57:09 PM
I am having a strange issue when using 8.3 notation (a ~ character in the
name) for file names and hosting them with IIS 5.0. I get prompted for
credentials when I select the file. I can rename the file to remove the ~
and it will allow me to download the file using the Anonymous account. Put
... more >>
SFPT With Windows 2000 Server?
Posted by Rob Carey at 7/19/2004 12:26:37 PM
Good Day Folks,
Could someone tell me what the steps are and what is
required to use SFTP instead of plain FTP in IIS 5.0 on a
Windows 2000 Server? Is it different for Windows Server
2003 as we will be migrating to it in the near future?
We have a new requirement that the site use SFTP f... more >>
IIS Bin folder Hiding automatically
Posted by Nisar C.K at 7/19/2004 11:52:21 AM
We have several ASP.NET project running on external
server, the problem we face is all bin folder on this
server get hidden so this reason all asp.net project get
error saying bin folder doesn't found couldn't access any
site. Whenever we create bin folder this get hidden and we
can access... more >>
Direct access to files without using web site
Posted by ktuel NO[at]SPAM streck.com at 7/19/2004 9:23:28 AM
I am running IIS 6. I have an application designed to authenticate
the users as to who they are and then only allow them to get certain
files depending on how the authenticated. We want all users to be
able to access our site. The problem is that if a user was clever,
they would be able to mo... more >>
Internet scam?
Posted by Susan David at 7/19/2004 9:20:08 AM
Does anyone have any information concerning Mrs Daphne
Deckers - infosponsor233@netscape.net? I have received
notification of lottery winnings and need to know if it is
a scam. On searching the internet there appears to be a
claim of the lottery being associated with Bill Gates to
highli... more >>
Application Pool with domain user identity does'nt work with anonymous access disbled
Posted by ReneMo at 7/19/2004 6:28:37 AM
A virutal directory with anonuymous access disabled doesn't work in aa
application domain running a domain user as Identity.
The domain user is local admin on the intranet server, member o
IIS_WPG and has all privileges of Network Service I could find.
If I switch on anonymous access, I can... more >>
By pass Scripting Restriction
Posted by hrishikesh musale at 7/18/2004 9:53:58 PM
hey i want to access one html page(from frame or iframe) which is
residing on another domain
(for e.g. http://www.google.com)and after that i am reading contents of
the page
by using following code
myFrame.document.body.innerHTML
which is giving access denied error
microsoft document say... more >>
Problems with banners on hotmail webpage and other sites...
Posted by Shumaes at 7/17/2004 10:38:02 AM
I had this problem several months ago suddenly out of the blue. Back then also I discussed over it in a Microsoft Newsgroup and they provided me with a 'run' command and then I edited a file. After that it was good. The problem then was that, banners wouldnt appear on any website that I go to. Espec... more >>
I just installed Norton's Firewall. UGH!
Posted by teelions NO[at]SPAM Yahoo.com at 7/17/2004 12:30:59 AM
I just installed Symantecs Norton's Internet Security to my machine.
But now I cannot view web pages from the localhost. I get a "The page
cannot be displayed" error. I looked for help at the Symantec support
site but there was nothing written about this common problem. How do I
fix it?
Terry... more >>
Disabling Parent Paths and OWA
Posted by CJ at 7/17/2004 12:22:58 AM
Can Outlook Web Access 2000 function if Parent Paths are
disabled in IIS 5.0?
Thanks,
- CJ... more >>
I keep losing my Internet connection - help!
Posted by Ron Linden at 7/16/2004 5:08:22 PM
I have to reboot my computer, but not my high speed cable
modem. This may happen several times an hour or less. I
do not have to be accessing the Internet for this to
happen.
Is anyone aware of a patch for this or does anyone khow I
can email support to find out if there is an update?... more >>
Question about SSL certificate created by SelfSSL tool
Posted by Boris Kagan at 7/16/2004 2:52:08 PM
Hello,
I was able to create SSL certificate by SelfSSL tool from IIS6 RK and now
when user opens our intranet site 'security alert' window pops up.
I order to continue user should click 'yes'. Is there any way to fix this?
We are trying to use SSL certificates internally.
Thanks,
Boris
... more >>
IIS 6 SecureBindings
Posted by Juan Cardena at 7/16/2004 2:51:03 PM
Hi I am tiring to get this to work.
My problem is that when I have value null from the form
The process page pass that value to IIS but
If I have two sites working and another site use the same port number
It stops one site then starts the other site
What can I do so when a pass a null numbe... more >>
Set security for web folder?
Posted by julie NO[at]SPAM vistasg.com at 7/16/2004 8:08:43 AM
I can't seem to set up the following permissions for a folder on my
website: I need to set up write permissions only for users logging
into the customer side of the site, no permissions for anonymous users
(those not logged in) and full permissions for users logging into the
administrative port... more >>
intranet
Posted by CAG at 7/15/2004 4:59:02 PM
can you restrict access to your intranet by a user id?... more >>
Limit Max 2 Sessions per IP address
Posted by A.M at 7/15/2004 3:57:30 PM
Hi,
Using IIS6, How can I restrict each client IP to maximum 2 sessions, so if a
client asks for 3rd session, it waits untill one of other 2 sessions ends.
Thanks,
Alan
... more >>
Restrict the number of connections
Posted by A.M at 7/15/2004 3:56:32 PM
Hi,
Using IIS6, Is it possible to limit webserver to maximum 10 connections?
Thanks,
Alan
... more >>
Using IIS Manager on a remote Win2k3 IIS 6.0
Posted by Clay Black at 7/15/2004 11:07:55 AM
We have a Novell network and a Window 2k3 native network. We are running an
IIS server on the 2k3 side but we need to manage it from both sides. I am a
member of the Domain Admins group and the Administrators group on the IIS
server. When I try to login as to that server it tells me I am not a... more >>
Popups
Posted by Noel at 7/15/2004 9:39:59 AM
Lately I have been Hammered by popups, How do I stop them.
HELP... more >>
Is Disabling WebDAV via registry entry still a good practice in IIS 6.0?
Posted by Paul at 7/15/2004 8:02:22 AM
In IIS 5.0 we had set the following registry entry to disable WebDAV, is
that still a good practice in IIS 6.0?
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters]
"DisableWebDAV"=dword:00000001
Appreciate your help.
Thanks,
Paul
... more >>
Integrated Security Problems with ADO 2.8
Posted by newbesj NO[at]SPAM chevrontexaco.com at 7/15/2004 2:09:49 AM
We have a couple of Intranet web applications that use Office Web
Components, and logon is done using integrated security set to SSPI.
Our users have "Automatic logon only in Intranet zone" specified in
Zone 2 in their Internet Settings, and this worked fine and dandy -
until we installed MDAC... more >>
password protected access to files hosted by IIS
Posted by www.MSmobiles.com at 7/15/2004 12:01:57 AM
hi,
how can I implement passowrd protected access to IIS located files?
for example:
when somebody tries:
http://x.msmobiles.com/a/dupa.pdf
then page with user name and password should open.
then user enters name and password
then program connects to certain webservice to validate a... more >>
|