| Groups | Blog | Home |
iis security : IIS 6.0, Host Headers and SSL
I have a client that for various reasons can only have one IP address,
however they need to seperate SSL enabled web sites. I followed the Technet Article at http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. The wilcard certificate has been assigned to both web sitesand the IIS Metabase SecureBindings set with the correct SSL host header for each site. All apppears to work correctly - requests go to the right site based on the URL, and all are being encrypted correctly. The issue I have is that when IIS is restarted I get the following error in the System event log: Source: W3SVC EventID: 1113 One of the IP/Port combinations for site 'xxxxxxxxx' has already be configured to be used by another site. The other site's SSL configuration will be used. Is this an indication of a problem (everything seems to work), or is it just a hangover from the way SSL Host Headers were implemented in Windows Server
1) What are the url for the two sites?
2) What's the secure binding info for two sites ? -- Regards, Bernard Cheah http://www.iis-resources.com/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... >I have a client that for various reasons can only have one IP address, > however they need to seperate SSL enabled web sites. I followed the > Technet > Article at > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. > > The wilcard certificate has been assigned to both web sitesand the IIS > Metabase SecureBindings set with the correct SSL host header for each > site. > All apppears to work correctly - requests go to the right site based on > the > URL, and all are being encrypted correctly. > > The issue I have is that when IIS is restarted I get the following error > in > the System event log: > > Source: W3SVC > EventID: 1113 > > One of the IP/Port combinations for site 'xxxxxxxxx' has already be > configured to be used by another site. The other site's SSL configuration > will be used. > > Is this an indication of a problem (everything seems to work), or is it > just > a hangover from the way SSL Host Headers were implemented in Windows > Server > 2003 SP1?
The certificate is allocated to *.company.com, and the host headers in use
are www.company.com and mail.company.com. From the metabase the SecureBindings are as follows: SecureBindings=":443:mail.company.com" and SecureBindings=":443:www.company.com" I have added the name company in place of the real name to protect the innocent but the settings are otherwise exactly as they really are. Regards, Tim. [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> 1) What are the url for the two sites? > 2) What's the secure binding info for two sites ? > > > -- > Regards, > Bernard Cheah > http://www.iis-resources.com/ > http://www.iiswebcastseries.com/ > http://www.msmvps.com/bernard/ > > > "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message > news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... > >I have a client that for various reasons can only have one IP address, > > however they need to seperate SSL enabled web sites. I followed the > > Technet > > Article at > > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. > > > > The wilcard certificate has been assigned to both web sitesand the IIS > > Metabase SecureBindings set with the correct SSL host header for each > > site. > > All apppears to work correctly - requests go to the right site based on > > the > > URL, and all are being encrypted correctly. > > > > The issue I have is that when IIS is restarted I get the following error > > in > > the System event log: > > > > Source: W3SVC > > EventID: 1113 > > > > One of the IP/Port combinations for site 'xxxxxxxxx' has already be > > configured to be used by another site. The other site's SSL configuration > > will be used. > > > > Is this an indication of a problem (everything seems to work), or is it > > just > > a hangover from the way SSL Host Headers were implemented in Windows > > Server > > 2003 SP1? > >
I would specify the binding IP as well.
"ip,ip.ip.ip:443:mail.company.com" -- Regards, Bernard Cheah http://www.iis-resources.com/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message news:95374434-449F-447C-AEF5-F7167F19AA23@microsoft.com... > The certificate is allocated to *.company.com, and the host headers in use > are www.company.com and mail.company.com. From the metabase the > SecureBindings are as follows: > > SecureBindings=":443:mail.company.com" and > SecureBindings=":443:www.company.com" > > I have added the name company in place of the real name to protect the > innocent but the settings are otherwise exactly as they really are. > > Regards, > Tim. > > "Bernard Cheah [MVP]" wrote: > >> 1) What are the url for the two sites? >> 2) What's the secure binding info for two sites ? >> >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis-resources.com/ >> http://www.iiswebcastseries.com/ >> http://www.msmvps.com/bernard/ >> >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message >> news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... >> >I have a client that for various reasons can only have one IP address, >> > however they need to seperate SSL enabled web sites. I followed the >> > Technet >> > Article at >> > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. >> > >> > The wilcard certificate has been assigned to both web sitesand the IIS >> > Metabase SecureBindings set with the correct SSL host header for each >> > site. >> > All apppears to work correctly - requests go to the right site based on >> > the >> > URL, and all are being encrypted correctly. >> > >> > The issue I have is that when IIS is restarted I get the following >> > error >> > in >> > the System event log: >> > >> > Source: W3SVC >> > EventID: 1113 >> > >> > One of the IP/Port combinations for site 'xxxxxxxxx' has already be >> > configured to be used by another site. The other site's SSL >> > configuration >> > will be used. >> > >> > Is this an indication of a problem (everything seems to work), or is it >> > just >> > a hangover from the way SSL Host Headers were implemented in Windows >> > Server >> > 2003 SP1? >> >> >>
I have tried it with an IP address as we;; as the port and host header. The
sites both still work however the error event is still logged. Regrads, Tim. [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> I would specify the binding IP as well. > "ip,ip.ip.ip:443:mail.company.com" > > > -- > Regards, > Bernard Cheah > http://www.iis-resources.com/ > http://www.iiswebcastseries.com/ > http://www.msmvps.com/bernard/ > > > "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message > news:95374434-449F-447C-AEF5-F7167F19AA23@microsoft.com... > > The certificate is allocated to *.company.com, and the host headers in use > > are www.company.com and mail.company.com. From the metabase the > > SecureBindings are as follows: > > > > SecureBindings=":443:mail.company.com" and > > SecureBindings=":443:www.company.com" > > > > I have added the name company in place of the real name to protect the > > innocent but the settings are otherwise exactly as they really are. > > > > Regards, > > Tim. > > > > "Bernard Cheah [MVP]" wrote: > > > >> 1) What are the url for the two sites? > >> 2) What's the secure binding info for two sites ? > >> > >> > >> -- > >> Regards, > >> Bernard Cheah > >> http://www.iis-resources.com/ > >> http://www.iiswebcastseries.com/ > >> http://www.msmvps.com/bernard/ > >> > >> > >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message > >> news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... > >> >I have a client that for various reasons can only have one IP address, > >> > however they need to seperate SSL enabled web sites. I followed the > >> > Technet > >> > Article at > >> > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. > >> > > >> > The wilcard certificate has been assigned to both web sitesand the IIS > >> > Metabase SecureBindings set with the correct SSL host header for each > >> > site. > >> > All apppears to work correctly - requests go to the right site based on > >> > the > >> > URL, and all are being encrypted correctly. > >> > > >> > The issue I have is that when IIS is restarted I get the following > >> > error > >> > in > >> > the System event log: > >> > > >> > Source: W3SVC > >> > EventID: 1113 > >> > > >> > One of the IP/Port combinations for site 'xxxxxxxxx' has already be > >> > configured to be used by another site. The other site's SSL > >> > configuration > >> > will be used. > >> > > >> > Is this an indication of a problem (everything seems to work), or is it > >> > just > >> > a hangover from the way SSL Host Headers were implemented in Windows > >> > Server > >> > 2003 SP1? > >> > >> > >> > >
So both site can't be start at all?
Sounds like something thing is binding to port 443. Can you remove all settings and start 1 site with port 443? next, if it's working, then reconfigure host header for the two ssl site, then try httpcfg query ssl post the result here. -- Regards, Bernard Cheah http://www.iis-resources.com/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message news:24A4563E-739A-4AF0-9DC3-3012ABA225E5@microsoft.com... >I have tried it with an IP address as we;; as the port and host header. The > sites both still work however the error event is still logged. > > Regrads, > Tim. > > "Bernard Cheah [MVP]" wrote: > >> I would specify the binding IP as well. >> "ip,ip.ip.ip:443:mail.company.com" >> >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis-resources.com/ >> http://www.iiswebcastseries.com/ >> http://www.msmvps.com/bernard/ >> >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message >> news:95374434-449F-447C-AEF5-F7167F19AA23@microsoft.com... >> > The certificate is allocated to *.company.com, and the host headers in >> > use >> > are www.company.com and mail.company.com. From the metabase the >> > SecureBindings are as follows: >> > >> > SecureBindings=":443:mail.company.com" and >> > SecureBindings=":443:www.company.com" >> > >> > I have added the name company in place of the real name to protect the >> > innocent but the settings are otherwise exactly as they really are. >> > >> > Regards, >> > Tim. >> > >> > "Bernard Cheah [MVP]" wrote: >> > >> >> 1) What are the url for the two sites? >> >> 2) What's the secure binding info for two sites ? >> >> >> >> >> >> -- >> >> Regards, >> >> Bernard Cheah >> >> http://www.iis-resources.com/ >> >> http://www.iiswebcastseries.com/ >> >> http://www.msmvps.com/bernard/ >> >> >> >> >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message >> >> news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... >> >> >I have a client that for various reasons can only have one IP >> >> >address, >> >> > however they need to seperate SSL enabled web sites. I followed the >> >> > Technet >> >> > Article at >> >> > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. >> >> > >> >> > The wilcard certificate has been assigned to both web sitesand the >> >> > IIS >> >> > Metabase SecureBindings set with the correct SSL host header for >> >> > each >> >> > site. >> >> > All apppears to work correctly - requests go to the right site based >> >> > on >> >> > the >> >> > URL, and all are being encrypted correctly. >> >> > >> >> > The issue I have is that when IIS is restarted I get the following >> >> > error >> >> > in >> >> > the System event log: >> >> > >> >> > Source: W3SVC >> >> > EventID: 1113 >> >> > >> >> > One of the IP/Port combinations for site 'xxxxxxxxx' has already be >> >> > configured to be used by another site. The other site's SSL >> >> > configuration >> >> > will be used. >> >> > >> >> > Is this an indication of a problem (everything seems to work), or is >> >> > it >> >> > just >> >> > a hangover from the way SSL Host Headers were implemented in Windows >> >> > Server >> >> > 2003 SP1? >> >> >> >> >> >> >> >> >>
Well, the cert is bind to all interfaces rather than the site ip.
Can you go to the website property - tcpip advanced and bind it to the ip. also try adsutil.vbs to get the securebindings for both sites agian. -- Regards, Bernard Cheah http://www.iis-resources.com/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ [quoted text, click to view] "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message news:8B13810C-D430-46CE-9F92-E9C98EA43D9E@microsoft.com... > No both sites work fine - I just get the error message as follows: > > "One of the IP/Port combinations for site '1974292190' has already be > configured to be used by another site. The other site's SSL configuration > will be used." > > I also have a third SSL which is for internal use only, uses a different > certificate and is bound to a different port. I though that it may be > causing > issues so I removed it but the error still occured. To summarise, I have > three SSL sites - two which share a wildcard certificate and use SSL host > headers (sites 1 and 1974292190), and a third one which has its own > certificate and is bound to a differnt port (site 432752131). All sites > work, > but there is an error logged at every IIS restart for site 1974292190 > which > shares the SSL wilcard certificate with site 1. > > The query output was as follows: > > C:\Documents and Settings\Administrator>httpcfg query ssl > > IP : 0.0.0.0:443 > Hash : 7fe3ca6a2d8988b5d87b b1028429e116710ede6 > Guid : {4dc3e181-e14b-4a21-b022-59fc669b0914} > CertStoreName : MY > CertCheckMode : 0 > RevocationFreshnessTime : 0 > UrlRetrievalTimeout : 0 > SslCtlIdentifier : > SslCtlStoreName : > Flags : 0 > ------------------------------------------------------------------------------ > IP : 0.0.0.0:8001 > Hash : dc63ff3095457ad7 bfb90 4cb3a7090ed2c b88 > Guid : {4dc3e181-e14b-4a21-b022-59fc669b0914} > CertStoreName : MY > CertCheckMode : 0 > RevocationFreshnessTime : 0 > UrlRetrievalTimeout : 0 > SslCtlIdentifier : > SslCtlStoreName : > Flags : 0 > ------------------------------------------------------------------------------ > > "Bernard Cheah [MVP]" wrote: > >> So both site can't be start at all? >> Sounds like something thing is binding to port 443. Can you remove all >> settings and start 1 site with port 443? >> >> next, if it's working, then reconfigure host header for the two ssl site, >> then try >> httpcfg query ssl >> >> post the result here. >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis-resources.com/ >> http://www.iiswebcastseries.com/ >> http://www.msmvps.com/bernard/ >> >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message >> news:24A4563E-739A-4AF0-9DC3-3012ABA225E5@microsoft.com... >> >I have tried it with an IP address as we;; as the port and host header. >> >The >> > sites both still work however the error event is still logged. >> > >> > Regrads, >> > Tim. >> > >> > "Bernard Cheah [MVP]" wrote: >> > >> >> I would specify the binding IP as well. >> >> "ip,ip.ip.ip:443:mail.company.com" >> >> >> >> >> >> -- >> >> Regards, >> >> Bernard Cheah >> >> http://www.iis-resources.com/ >> >> http://www.iiswebcastseries.com/ >> >> http://www.msmvps.com/bernard/ >> >> >> >> >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message >> >> news:95374434-449F-447C-AEF5-F7167F19AA23@microsoft.com... >> >> > The certificate is allocated to *.company.com, and the host headers >> >> > in >> >> > use >> >> > are www.company.com and mail.company.com. From the metabase the >> >> > SecureBindings are as follows: >> >> > >> >> > SecureBindings=":443:mail.company.com" and >> >> > SecureBindings=":443:www.company.com" >> >> > >> >> > I have added the name company in place of the real name to protect >> >> > the >> >> > innocent but the settings are otherwise exactly as they really are. >> >> > >> >> > Regards, >> >> > Tim. >> >> > >> >> > "Bernard Cheah [MVP]" wrote: >> >> > >> >> >> 1) What are the url for the two sites? >> >> >> 2) What's the secure binding info for two sites ? >> >> >> >> >> >> >> >> >> -- >> >> >> Regards, >> >> >> Bernard Cheah >> >> >> http://www.iis-resources.com/ >> >> >> http://www.iiswebcastseries.com/ >> >> >> http://www.msmvps.com/bernard/ >> >> >> >> >> >> >> >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message >> >> >> news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... >> >> >> >I have a client that for various reasons can only have one IP >> >> >> >address, >> >> >> > however they need to seperate SSL enabled web sites. I followed >> >> >> > the >> >> >> > Technet >> >> >> > Article at >> >> >> > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. >> >> >> > >> >> >> > The wilcard certificate has been assigned to both web sitesand >> >> >> > the >> >> >> > IIS >> >> >> > Metabase SecureBindings set with the correct SSL host header for >> >> >> > each >> >> >> > site. >> >> >> > All apppears to work correctly - requests go to the right site >> >> >> > based >> >> >> > on >> >> >> > the >> >> >> > URL, and all are being encrypted correctly. >> >> >> > >> >> >> > The issue I have is that when IIS is restarted I get the >> >> >> > following >> >> >> > error >> >> >> > in >> >> >> > the System event log: >> >> >> > >> >> >> > Source: W3SVC >> >> >> > EventID: 1113 >> >> >> > >> >> >> > One of the IP/Port combinations for site 'xxxxxxxxx' has already >> >> >> > be >> >> >> > configured to be used by another site. The other site's SSL >> >> >> > configuration >> >> >> > will be used. >> >> >> > >> >> >> > Is this an indication of a problem (everything seems to work), or >> >> >> > is >> >> >> > it >> >> >> > just >> >> >> > a hangover from the way SSL Host Headers were implemented in >> >> >> > Windows >> >> >> > Server >> >> >> > 2003 SP1? >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >>
No both sites work fine - I just get the error message as follows:
"One of the IP/Port combinations for site '1974292190' has already be configured to be used by another site. The other site's SSL configuration will be used." I also have a third SSL which is for internal use only, uses a different certificate and is bound to a different port. I though that it may be causing issues so I removed it but the error still occured. To summarise, I have three SSL sites - two which share a wildcard certificate and use SSL host headers (sites 1 and 1974292190), and a third one which has its own certificate and is bound to a differnt port (site 432752131). All sites work, but there is an error logged at every IIS restart for site 1974292190 which shares the SSL wilcard certificate with site 1. The query output was as follows: C:\Documents and Settings\Administrator>httpcfg query ssl IP : 0.0.0.0:443 Hash : 7fe3ca6a2d8988b5d87b b1028429e116710ede6 Guid : {4dc3e181-e14b-4a21-b022-59fc669b0914} CertStoreName : MY CertCheckMode : 0 RevocationFreshnessTime : 0 UrlRetrievalTimeout : 0 SslCtlIdentifier : SslCtlStoreName : Flags : 0 ------------------------------------------------------------------------------ IP : 0.0.0.0:8001 Hash : dc63ff3095457ad7 bfb90 4cb3a7090ed2c b88 Guid : {4dc3e181-e14b-4a21-b022-59fc669b0914} CertStoreName : MY CertCheckMode : 0 RevocationFreshnessTime : 0 UrlRetrievalTimeout : 0 SslCtlIdentifier : SslCtlStoreName : Flags : 0 ------------------------------------------------------------------------------ [quoted text, click to view] "Bernard Cheah [MVP]" wrote:
> So both site can't be start at all? > Sounds like something thing is binding to port 443. Can you remove all > settings and start 1 site with port 443? > > next, if it's working, then reconfigure host header for the two ssl site, > then try > httpcfg query ssl > > post the result here. > > -- > Regards, > Bernard Cheah > http://www.iis-resources.com/ > http://www.iiswebcastseries.com/ > http://www.msmvps.com/bernard/ > > > "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message > news:24A4563E-739A-4AF0-9DC3-3012ABA225E5@microsoft.com... > >I have tried it with an IP address as we;; as the port and host header. The > > sites both still work however the error event is still logged. > > > > Regrads, > > Tim. > > > > "Bernard Cheah [MVP]" wrote: > > > >> I would specify the binding IP as well. > >> "ip,ip.ip.ip:443:mail.company.com" > >> > >> > >> -- > >> Regards, > >> Bernard Cheah > >> http://www.iis-resources.com/ > >> http://www.iiswebcastseries.com/ > >> http://www.msmvps.com/bernard/ > >> > >> > >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message > >> news:95374434-449F-447C-AEF5-F7167F19AA23@microsoft.com... > >> > The certificate is allocated to *.company.com, and the host headers in > >> > use > >> > are www.company.com and mail.company.com. From the metabase the > >> > SecureBindings are as follows: > >> > > >> > SecureBindings=":443:mail.company.com" and > >> > SecureBindings=":443:www.company.com" > >> > > >> > I have added the name company in place of the real name to protect the > >> > innocent but the settings are otherwise exactly as they really are. > >> > > >> > Regards, > >> > Tim. > >> > > >> > "Bernard Cheah [MVP]" wrote: > >> > > >> >> 1) What are the url for the two sites? > >> >> 2) What's the secure binding info for two sites ? > >> >> > >> >> > >> >> -- > >> >> Regards, > >> >> Bernard Cheah > >> >> http://www.iis-resources.com/ > >> >> http://www.iiswebcastseries.com/ > >> >> http://www.msmvps.com/bernard/ > >> >> > >> >> > >> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message > >> >> news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com... > >> >> >I have a client that for various reasons can only have one IP > >> >> >address, > >> >> > however they need to seperate SSL enabled web sites. I followed the > >> >> > Technet > >> >> > Article at > >> >> > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. > >> >> > > >> >> > The wilcard certificate has been assigned to both web sitesand the > >> >> > IIS > >> >> > Metabase SecureBindings set with the correct SSL host header for > >> >> > each > >> >> > site. > >> >> > All apppears to work correctly - requests go to the right site based > >> >> > on > >> >> > the > >> >> > URL, and all are being encrypted correctly. > >> >> > > >> >> > The issue I have is that when IIS is restarted I get the following > >> >> > error > >> >> > in > >> >> > the System event log: > >> >> > > >> >> > Source: W3SVC > >> >> > EventID: 1113 > >> >> > > >> >> > One of the IP/Port combinations for site 'xxxxxxxxx' has already be > >> >> > configured to be used by another site. The other site's SSL > >> >> > configuration > >> >> > will be used. > >> >> > > >> >> > Is this an indication of a problem (everything seems to work), or is > >> >> > it > >> >> > just > >> >> > a hangover from the way SSL Host Headers were implemented in Windows > >> >> > Server > >> >> > 2003 SP1? > >> >> > >> >> > >> >> > >> > >> > >> > >
Don't see what you're looking for? Try a search.
|
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |