all groups > iis security > june 2006 > threads for june 22 - 28, 2006
Filter by week: 1 2 3 4 5
login problem with iis and webdav.
Posted by Allan Bentsen at 6/28/2006 9:16:30 PM
Hi there
My setup is as follows.
A Windows 2003 Server, IIS 6, WebDav, and a website (aspx/C#)
A Windows XP Pro sp2 ie6 sp2.
Problem:
From a webpage it is possible to choose between opening a folder in a
virtual directory with file://... or http:// (WebDav).
When a user opens the folde... more >>
Is there a way to avoid/security alert box from redirecting to HTTP to HTTPS?
Posted by Jayanthv at 6/28/2006 2:45:25 PM
I saw some questions and answers which says we cannot supress the
security alert box when redirecting from HTTP to HTTPS?
But i saw many sites are easily redirecting from HTTP to HTTPS without
security alert box..
How can i code such that i should not get alert box from HTTP to HTTPS?
p... more >>
IIS6 HTTPS POST not being returned to .ASP file...
Posted by Sean at 6/28/2006 8:39:02 AM
Using IIS6 on 2003 SP1. What I am doing is submitting a credit card approval
request to an HTTPS (ssl) site. The response is being redirected to an .ASP
file - which is set up to accept the fields being returned. Problem is I
never get anything returned to the file. I have illiminated the ... more >>
Can Somone Tell Me If We Have a Hacker?
Posted by razor at 6/27/2006 9:26:02 AM
Hello--
I am pasting an event log from our IIS/web server that repeats about 50
times every day during non-business hours. Our SQL administrator seems to
believe that somone is trying to hack into our system via FTP.
Can somone tell me if the below is a hacker, and what we can do about it?... more >>
SSL issue OWA 2003
Posted by The_Bar at 6/27/2006 8:41:38 AM
Dear Reader,
I have installed an Windows exchange server 2003 with my own CA. I have
made my own webserver certificate that will be used by OWA.
Now I have one issue, when I connect to my e-mail using OWA I see at
the bottem of my screen the secured ssl icon, but when I was logged on
the ic... more >>
A little help (kerberos, netbios, and SPN... oh my!)
Posted by Craig Carrigan at 6/27/2006 12:00:00 AM
I have a custom intranet that I have setup for our company. The access is
secured using IWA and when the site is access by server name (QSERVER\internal)
the domain user's credentials are passed automatically and everything is
fine. This is good because we don't want internal users (people p... more >>
The IIS service does not seem to be serving up .asmx or .asp pages
Posted by idaliac at 6/26/2006 6:04:01 PM
Hope someone help me ,
The IE error that is presented is "Cannot find server or DNS Error"
and t#
Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2006-06-26 15:23:19 W3SVC2 3.131.90.64 GET /fpad... more >>
IIS Access
Posted by phill at 6/26/2006 7:49:02 AM
Hello,
We have had a request off developers to have access to some servers. I can
achieve everything I need by assigning a group to log on locally and Allow
RDP. This just allows them to look.
One of the requests is to have read ability for IIS but you need admin
rights to run this. ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS5: Renew certificate
Posted by Andrew Hodgson at 6/25/2006 11:24:46 AM
Hi,
I wish to renew a certificate with IIS 5, but the provider of the new
certificate should idealy be another issuer.
If I follow the renew wizard to generate the CSR, will this work by
sending the CSR to the new supplier, then installing the certificate?
Will it effect the old certificate... more >>
security error in IIS logs (401.2 error)
Posted by Alexander Ferrugia at 6/23/2006 5:23:01 PM
Hi:
I'm trying to deploy my VisualStudio2003 ASP.NET application on Windows
Server 2003 w/ SP-1. When I navigate to my site (locally or from another
network computer) in Internet Explorer I'm being prompting for a network
username/password. I believe have configured the server properly in... more >>
file security/authentication
Posted by Carl Hilton at 6/23/2006 2:10:10 PM
OK, I thought I had tackled this before a while a ago but forgot what I
did...
I am running IIS6 on a W2K3 server. for most of my site I have Anonymous
access authorized. I have one file that I want to use the local system ACLs
to authenticate with... I have turned off Anonymous access, I h... more >>
New HTTPS web site and certificate installation
Posted by instrument_programmer at 6/23/2006 11:34:02 AM
While I am a very experienced developer I am new to the whole IIS secure
server stuff. We had created a locally generated "test" cerrificate and
installed it and it works with that. But we wanted to expose this outside
our firewall with a real certificate. We have an ISA server acting as ou... more >>
Keeping a particular intruder out
Posted by Peter at 6/23/2006 9:35:51 AM
If this is OT, then I apologise.
I'm running 2003 Standard, basically to host my wife's hobby sites.
I monitor the logs for intrusion attempts, and persistent offenders get
barred using a simple IPSEC implementation.
However, I cannot stop a plague of visits from msnbot/0.9 supposedly
o... more >>
Security Tab Missing On Specific File Extensions - 2003
Posted by Chase D at 6/22/2006 8:26:01 PM
Okay so I am on a windows 2003 server. I first found that these certain types
of files (.wpd) Corel files could not be downloaded from the web. I first
thought it was a security issue so I right clicked the files and was going to
look at the permissions. The security tab is missing. In fact on... more >>
Stop HTTP Access
Posted by Thom Little at 6/22/2006 6:32:45 AM
I have an ASP.NET 1.1 application on a Windows 2000 Server that can be
accessed as ...
http://name.tld or https://name.tld .
How can I force it to disallow the http access and only permit the https
access?
--
-- Thom Little -- www.tlanet.net -- Thom Little Associates, Ltd.
--
... more >>
II6.0 ISAPI & MIME types
Posted by Ibrahim. at 6/22/2006 5:49:01 AM
Hello,
following are my questions with regard to ASP.NET 2.0, II6.0 & Win2003
server running a Internet Application.;
1. What is the difference between MIME types & ISAPI filter.
2. How can I restrict a file (*.pdf) from being accessed directly from the
URL through ISAPI filter.
3. H... more >>
|