all groups > iis security > july 2006 > threads for july 8 - 14, 2006
Filter by week: 1 2 3 4 5
Urlscan 2.5 question
Posted by winsysadmin at 7/14/2006 8:30:02 AM
Will installing Urlscan on IIS 4 & IIS 5 servers protect them from
Trace/Track vulnerabilities by default or do I need to configure Urlscan to
do this?
Thanks!... more >>
Problem with Anonymous Access
Posted by Jennifer at 7/14/2006 7:38:02 AM
I have a new Windows 2003 server with IIS. I have set up the default web
page with anonymous access. Everything works fine for a day, but something
happens overnight and my anonymous access quits working. When I try
accessing the site, I am asked for the user id, password, and domain. If I... more >>
port 3306
Posted by ComputerTeacher at 7/14/2006 12:05:23 AM
I'm trying to install MySQL on a Windows 2003 server. But port 3306 doesn't
seem to be open.
When I give the netstat -an command, I don't get any information about port
3306
There is no firewall running on the machine. So I'm assuming that port 3306
is being blocked by IIS 6.
Can anyone g... more >>
E-Directory and Active Directory replication issue
Posted by vilas at 7/13/2006 9:38:56 PM
We have replicated Novell users from E-directory to MS Active Directory so
that when the users login using NovelID on novel netware will get
authenticated on IIS where only windows authentication is turned on. But
doesn't seem to be work. Do i need to do anything to make it work? Or is
there... more >>
404 errors on downloading files
Posted by Coderanger at 7/13/2006 10:32:12 AM
We have many different files on our server ".dat", ".exe", ".template"
plus other custom file extensions.
All these files on IIS6 (Windows 2003) seem to give a 404 when trying
to download them.
We have the folder set to "None" execute permissions and it is set for
"Read" permissions.
Is ... more >>
Getting Ip address of the actual client
Posted by Hariprasad at 7/13/2006 3:08:25 AM
How can I get IP address of the requested client?
When I am using request.servervariables('remote_addr'), I am getting public
IP, but not the actual client IP.
My application is hosted on public IP 202.63.107.242, and through IP
forwarding it was being redirected to 192.168.100.147. How to ... more >>
Flaw in default permissions
Posted by Anthony Yates at 7/12/2006 5:23:18 PM
The documentation states that the IUSR account by default has Read, Execute
NTFS permissions to the web site folders:
http://support.microsoft.com/?kbid=812614
I have done many default installations and it does not. It just has a Deny
Write. Any comments? Is that just a straightforward docume... more >>
Supressing Public ASP Error Codes
Posted by Jody at 7/12/2006 3:37:01 PM
I am the server Admin for a webmaster who designed a site in Straight ASP
using SQL Server 2000 SP4. I am not a literate ASP programmer and the
webmaster is not very experienced in this area either.
So, I am soliciting some assistance with how to having non-informative ASP
error messages ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Web Server Type
Posted by George Schneider at 7/12/2006 6:31:02 AM
I recently had a vulnerbility test conducted on one of web servers and the
recommendation that was made to us that web server server type was detectable
as Microsoft-IIS/6.0. The conclusion was this is a vulnerabilty. The
recommended solution was to configure the server to use an alternative... more >>
IIS 6.0
Posted by George Schneider at 7/12/2006 5:55:02 AM
An outside company has informed us that our IIS 6.0 serve is below the
current service pack level. They are reporting that we are running IIS 6.0 -
w2k3 build 3790. Is there such a thing as a service pack for IIS and if so
how can I find it... more >>
Secure SFTP Server
Posted by BoffinHead at 7/11/2006 7:37:01 AM
Is it possible to create a secure SFTP site within SBS 2003 Premium? I've
deployed the following -
http://www.digitalmediaminute.com/article/1487/setting-up-a-sftp-server-on-windows
and wanted to know if Windows had the same capability as opposed to inserting
this puppy on to the server.
... more >>
Exception from HRESULT: 0x800A0046
Posted by atuljoshi at 7/11/2006 12:16:02 AM
Hi,
I was using windows 2000 server before with IIS-5. Now i am just sifted to
windows 2003 with IIS-6, In this i am facing problem with the ecurity
settings when i am trying to run a web site which is working fine on the
other 2000 server it gives me an error which is as follows :
Sys... more >>
AD & ADAM together in harmony
Posted by GrITMan at 7/10/2006 11:42:01 PM
We are planning on building an Intranet/Extranet for our payroll application.
The idea is to use AD integrated IIS security for internal users to
automatically identify and authenticate them on IE access, and use ADAM for
clients.
The architecture will involve an internally hosted web server... more >>
Credentials not passed on when using ASP.NET
Posted by Jay-nospam at 7/10/2006 4:32:41 PM
Hi there,
I am having trouble getting an ASP.NET web application to connect to another
computer and passing the proper credentials and I hope someone can help me.
I have a stand-alone Windows 2003 Server, ServerA, running as a Web Server
that uses ASP.NET. The default.aspx file tries to ac... more >>
|