all groups > iis security > april 2005 > threads for april 8 - 14, 2005
Filter by week: 1 2 3 4 5
Need to block Web Spider software like Teleport pro
Posted by Rijesh at 4/14/2005 11:10:01 PM
Hi,
Recently our website crashed due to malicious activities by a stranger by
using web spider software Teleport pro. Teleport Pro is the software that
does this web capture activity, the client that was repeatedly hitting us
every few seconds with the ‘web capture’ and ultimately cause... more >>
Looking for suggestions on how to clean up ACL - W2k+IIS
Posted by M. Simioni at 4/14/2005 7:12:13 PM
Hi, i'm new to Windows 2000 server administration.
I just got a Windows 2000 server machine that acts as a webserver.
I saw that the ACL is very dirty: the ASPNET, FTP and IUSR_ accounts have
full control in too much directory.
Well, i was looking for a good tutorial on how to clean the acl... more >>
Security concern in event viewer
Posted by Joe at 4/14/2005 4:31:03 PM
I posted this in the Security General section also and was helped to a point
but then asked to come here for better assistance. Here goes:
Hello,
I am getting this in my event viewer every now and then.
The configuration information of the performance library
"C:\WINDOWS\system32\inetsr... more >>
IIS Challenge for Password. WinXP authenticates differently than Win2k.
Posted by Benjamin Chan at 4/14/2005 2:51:37 PM
To Whom It May Concern:
Problem:
Windows XP tries to authenticate with IIS as IIS_Machinename\Username
Where I'd like to get it to do it like Win2k used to do and authenticate
with IIS as Domain\Username
I recently migrated IIS from a domain controller where the way the WinXP
machines ... more >>
URLScan as an attack vector?
Posted by Sleepless in Vancouver at 4/13/2005 5:25:02 PM
Wondering if anyone has experienced this or may have some insight in to what
happened.
We discovered that production internet web-server (in a DMZ) stopped serving
pages after a reboot (patches). We had installed the patches on test servers
earlier in the day and not experienced any proble... more >>
How to tell if IIS lockdown Tool is installed?
Posted by John Smith at 4/12/2005 12:00:00 AM
Hi
Sorry for the simplicity of this question but can anyone tell me how I can
easily tell if the IIS lockdown Tool as been installed on a machine. I know
it doesnt appear in Add/Remove programs. I also know Urlscan does appear
there but URLscan may have not been installed.
I have compared ... more >>
How to set up a certificate server
Posted by Alvaro Moncada at 4/11/2005 1:44:44 PM
Hi guys,
Our company has been required now to encrypt our e-mails and FTP
transmissions by the new HIPPA regulations. I've been researching a few
options like using PGP or MS Certificate server. I was wondering if some one
out there could provide with some information about setting this ser... more >>
IIS calling cscript.exe from cgi permission denied - WMI access
Posted by J M at 4/11/2005 12:00:00 AM
I have a perl cgi script on Windows 2003 server with IIS 6.0 that is calling
prnport.vbs, prnmgr.vbs (supplied by microsoft that creates printer port and
print queue on server) however IIS returns "cscript ... permission denied"
error even after adding IUSR_<SERVER> user id to administrator l... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Anonymous access
Posted by finding.alan NO[at]SPAM gmail.com at 4/10/2005 11:10:59 PM
Hi Ken,
I had found my problem of those "HTTP and 404" and "The Page cannot be
displayed". The problem due to those shared folder didn`t configure as
a Web Shaing. Thanks for your advise for the past few days.
I have a question to you. I had deleted my default web site and
created a new one a... more >>
Intranet problem - 404 and 405 errors
Posted by David at 4/8/2005 10:01:06 AM
We have recently moved from Server 2000 to SBS 2003. In addition to the
companyweb site, I also wanted to set up an intranet that housed a few
functions and applications for our internal users that are html-based.
I created a new web-site, etc. called home. If I type http://home in my
bro... more >>
IIS 6 conflict using port 443 for NON-SSL traffic
Posted by Richard Dixson at 4/8/2005 9:31:34 AM
I need IIS to respond to HTTP requests on port 443 for different IPs on the
same web server, with one IP set up to handle NON ssl traffic (http://), and
the other set up with a certificate to handle SSL (https://) traffic.
IIS 6.0 (using Win2K3 latest updates/patches) will NOT allow this. When... more >>
request certificate immediately
Posted by John Grandy at 4/8/2005 8:41:32 AM
IIS > Default Web Site > Properties > Directory Security > Secure
Communications > Server Certificate >
In the Wizard's 2nd pane choose "Create a new certificate" ...
In the 3rd pane, the choice "Send the request immediately to an online
certification authority" is disabled.
How to enab... more >>
update databse
Posted by sebastiano at 4/8/2005 12:41:03 AM
Hi, i have this configuration:
*) Windows 2000 server
*) iis 5.0
*) pages html + page asp (no asp.net)
*) 1 file as databse (access 2000)
*) website and database are on the same computer
the problem is:
i have a web server where i need to update a databse only with an
authenticated
users.
... more >>
|