Previous Next

• 08-20-2008, 11:49 AM

  tbonehwd Joined on 09-03-2005, 8:12 PM Posts 2

  URLScan Beta 3 Questions Reply Contact First off I have tried stopping urlscan I removed it from the ISAPI Filters yet when I restart web services and view the logs it is running and blocking urls that cause a problem. So my first question how do I remove it or stop it from running? Next is there a way to allow a specific IP address to bypass all rules? I ask this because our affiliate program allows admins to login as affiliates and it encrypts the users password into the url (%3c) just happens to be some of the characters in the url which forces a block. I don't want to take that rule out but some of our users can't access these pages because they are blocked. Does anyone have any suggestions?

• 08-21-2008, 11:51 AM

  In reply to

  wadeh Joined on 04-19-2005, 10:17 PM Posts 98

  Re: URLScan Beta 3 Questions Reply Contact UrlScan is installed as a global ISAPI filter.  You can unregister it from the IIS Manager UI and then reregister it when you want to run it again.  Alternately, you could uninstall it.  The uninstaller will not delete your urlscan.ini file or your log files.  If you then reinstall it, it will run as it did before. Regarding an IP exception list, UrlScan does not have that feature.  One of the reasons for this is that IP addresses can be spoofed.  It would be possible for an attacker to get malicious requests past UrlScan by doing this. Thanks, -Wade PS: UrlScan 3.0 released today.  See the announcement at the top of this forum.

• 08-22-2008, 12:03 PM

  In reply to

  tbonehwd Joined on 09-03-2005, 8:12 PM Posts 2	Re: URLScan Beta 3 Questions Reply Contact Thank you.