all groups > iis security > november 2005 > threads for november 1 - 7, 2005
Filter by week: 1 2 3 4 5
How can I use both http and https for the same website?
Posted by blasapher NO[at]SPAM cox.net at 11/7/2005 10:23:37 PM
First of all, I'm new here; and just now learning IIS - so thanks for
being patient with me!
I have a website, www.mywebsite.com, that has default page of
default.aspx.
I have applied the SSL to the entire site.
Now, my customer would like to be able to do this:
They would like to go t... more >>
IIS ASP Parent Paths
Posted by Joe at 11/7/2005 1:51:01 PM
Hello,
I have a website programed in asp and it needs parent paths to operate
correctly.
I have heard of parent paths being very risky. What are the issues with this
type of setup?
Thank you
Joe... more >>
We can't find "192.168.1.11"
Posted by OutInTheDesert at 11/7/2005 12:58:03 PM
I am unable to open an IIS page using the IP address. Instead I receive the
MSN search page with the message "We can't find "192.168.1.11".
Web pages will open if I use "Localhost" or 127.0.0.1 This is a new
installation with all default settings.
Running IIS on WinXP Pro SP2 with workgr... more >>
Can you force the ftp site to accept 7-bit only?
Posted by Carol at 11/7/2005 1:58:52 AM
I may have to set up an ftp site for anonymous upload. The files to be
uploaded will be text only. I have been looking for a way to force the
site to allow 7-bit connections only - is this possible? Or is there
some other way I could enforce text only?
Thanks,
Carol
... more >>
windows 2000 IIS 5 403.6 ip address restriction
Posted by Bulent at 11/7/2005 12:00:00 AM
I have a problem with IIS 5.0, My IP address is blocked by IIS server
automatically, when I browse the web page.
I have to go to IIS admin, remove my ip address from the deny list.
DOes anybody know why IIS blocks my IP address?
Thanx.
B&B.
... more >>
Server 2k3 SP1 Won't do a intergrated authentication
Posted by Lokiarmos at 11/6/2005 11:34:00 PM
I have a server 2k3 with SP1 and latest patches connected to my domain.
The problem that i am having is that one of my website will not authenticate
my user. I have set the authenication level to Intergrated Windows
authentication but it won't accept my user name or password.
i was looki... more >>
Windows update failing
Posted by Yazzie at 11/5/2005 4:37:03 PM
Why is my windows update request failing?... more >>
Desperate - Bypass Basic Authentication Prompt?
Posted by Kenneth Koh at 11/4/2005 9:44:06 PM
Hi all
Is it achievable to use an application login to bypass the Basic
authentication prompt? Via ISAPI?
Thanks in advance!
Regards,
Kenneth
... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
open contents of web folders in edit mode
Posted by Mark St Laurent at 11/4/2005 8:06:51 PM
I am running IIS 5.1 on a XP sp2 PC. I have created an internal web site for
my staff. This site contains pages that are published from excel speadsheets
when edited by a designated employee. Originally the spreadsheets were
access via a shared directory, opened then edited and saved which pub... more >>
Configure IIS Server security
Posted by EddieF at 11/4/2005 12:41:03 PM
Hello,
I am new at setting up IIS Web Servers . I need to make sure that a new Web
Server running on Windows 2003 SP1 server with IIS 6 is set up securely.
Here are the steps I've already taken:
1) Created two NTFS partitions - one for the system and another for data
2) Installed URLSca... more >>
Adding allowed IP addresses in bulk
Posted by Rob at 11/4/2005 7:20:10 AM
Hi
Ive got a website which is restricted using the
IP address and domain name restrictions
option.
Ive been asked to add 60 seperate ip addresses to the list, all of them
different. Is there a way to add them in in bulk?
Rob... more >>
Trust my own CA ;ssl certificate is not from a trusted publisher
Posted by Dennis at 11/3/2005 4:27:02 AM
My goal is to get outlook web acces working, wihout SSL errors. It know says
my ssl certificate is not from a trusted publisher. When I choose install
certificate , the message appears again the next time. How can I get my
server on the trusted publishers list of my windows XP workstation. wha... more >>
SSL question
Posted by DB at 11/2/2005 1:02:04 PM
How do I do this?
I have many mail servers that use SSL.
web server names and the SSL names are as follows:--
webmail1.domain.com
webmail2.domain.com
webmail3.domain.com
webmail4.domain.com
webmail5.domain.com
I want users to simply use httpS://webmail.hbk.com which will redirect to ... more >>
SSL security question
Posted by Francisco Lopez at 11/2/2005 11:28:46 AM
We recently upgraded our server to Win 2003 - from nt4.
We created a SSL Certificate backup key according to this instructions:
HOW TO: Import and Export an IIS 4.0 Certificate by Using Key Manager
http://support.microsoft.com/default.aspx?scid=kb;en-us;324904#2
My question is: can I impor... more >>
killing client popup window
Posted by s.chelliah NO[at]SPAM gmail.com at 11/2/2005 8:39:27 AM
I am using basic authentication using an embedded web server (not IIS)
and noticed a problem (bug?) with microsoft IE 6.0. Here are the steps
I did:
1) when the authentication window pops up, log in using user name and
password.
2) Let the session expire (Using my code in the web server... more >>
Anyone know much about SSL?
Posted by alexbax at 11/2/2005 7:03:08 AM
I currently host a webserver runing IIS5.5 with an SSL 56bit cert installed.
I am thinking about upgrading to an SGC cert from thwate.
As this can support up to 256bits, I am wondering if there will be any speed
issues when accessing the site?
Cheers!
Alex... more >>
Security problem in IE login prompt...
Posted by Wan at 11/2/2005 5:29:14 AM
Hi,
Please enlighten why IIS Server ( running on a domain in Win2003 ) allow the
IE 6.0 client to login with just username and password only, without keyin
the domain name before the username in the login prompt ?
Is it a security problem in IIS Server in Windows authentication mode ?
ANy... more >>
Application-defined or object-defined error
Posted by Sarge at 11/2/2005 5:20:07 AM
We have an internal corporate VB6 web application that uses MSGraph to
generate graphs. It works fine under W2k server, but not on W2003/SP1 - I
get the error in the subject line. (Only authenticated users may access the
site.) The application is running in its own application pool using th... more >>
Generate SSL for Intranet
Posted by vidro at 11/1/2005 11:30:08 AM
What I need:
I need to generate a couple SSL certificates just for my Intranet, I do not
need any out side CA's
What is, and How is, the best way for me to do this?... more >>
FTP Login flood
Posted by Ralph Hulslander at 11/1/2005 11:08:02 AM
A Windows 2000 server is being subjected to a continuous stream of FTP login
attempts.
Essentially this was causeing a denial of service until I set the Event Log
to overwrite once full.
Is there any way to limit the login attempts? None of the attempts are
successful.
These attacks come f... more >>
Choose a digital certificate Dialog shows no certificates
Posted by Bill at 11/1/2005 8:48:08 AM
Hello,
I'm trying to implement user authentication via certificates for a website.
In ISS I selected properties for the website -> Directory Security -> Secure
Communications Area (Edit) -> Checked Accept Client Certificates.
Going to the website (using https) a dialog box is brough up a... more >>
Relogin with microsoft integrated authentication
Posted by julik at 11/1/2005 5:58:34 AM
Hello,
I am using classic ASP with IIS5 on win2000.
If Integrated authentication is inabled is there a way to logout a user
once they are authenticated? In other words if the user who is logged
on to machine is not the same person accessing the site and they want
to relogin as themselves, how... more >>
Securing Web Database
Posted by Prabhat at 11/1/2005 12:00:00 AM
Hi All,
I have a website setup which has MS-Access DB. The web pages are in ASP and
uses ADO to connect to DB. The DB is located in the Folder "/Database". I
have the Connection string setup in the Global.asa file.
As my virtual Directory is "/" and all files and folders including the
"D... more >>
Report of pages set with SSL
Posted by Doug at 11/1/2005 12:00:00 AM
Hello. Is there a way to create a report of all pages on a web site that are
set to use SSL encryption?
Thanks
Doug
If replying to me directly, remove REMOVE from my email address.
... more >>
|