My framework 4 asp.net app using forms authentication runs fine in Cassini and in IIS7.5 on the local box but on a public facing box with IIS7.5 in the DMZ (running cookieless session state) the authentication breaks without returning any error - the forms authentication simply does not work. I have...

Hi, My web application runs on Windows Server 2008 and IIS 7. During penetration testing, we found that it was possible to determine the existence of directories within the web root on the system through messages returned by the access control code. This could enable an attacker to target particluar...

Hi everybody out there I am looking for a way to prevent that our streaming video content is accessed from other players/clients than ours (wmp/silverlight). We are also starting up with smooth streaming. So that must also be protected againt hotlink/deep linking. At this point we are using an application...

My web site has been modeled after the asp.net personel starter kit since it came out. I'm now running asp.net 3.0 and IIIS 7. I am trying to protect the web pages in a folder named Memberpages using roles.The role name Friends. Logging into my web site has allways gave me access to the Admin folder...

If all the valid requests will be coming from a specific website, would IP Address authorization meet your needs? http://technet.microsoft.com/en-us/library/cc770273.aspx -Chris

I have a well running 3-tier web application in a Windows 2003 domain. The Internet-Explorer Clients call aspx-pages ont he webserver. The webserver then performs a DCOM call to a document management server using impersonation. It all works fine using only aspx pages. Checking the thread principal before...

Hiya. I'm hoping someone might be able to send me some sample code or point me towards a tutorial or blog post... I've just dived into the world of Windows Media Services. For a current project I need to be able to restrict access to certain WMV files housed upon a streaming media server. For...

Hi, We all know that the World isn't full of bright sparks like ourselves and occasionally people delete files because they don't know what they're for, or overwrite files because they have updated the file. In this case, Im talking about the web.config file(s) at the website level. This...

Hi everyone, I'm new to this forum and look forward to learning more about IIS and it's members. I have a IIS 7 security problem ( at least I think it is a security issue) that have been trying to solve and create a virtual directory, yet unsuccessful!! I'm hoping to find the solution with...

I have recently found a rootkit on my computer through AVG and am wondering how to get this thing off. I tried to get AVG to delete it but it said it cannot. I heard you can re-install windows vista and also restore default settings but I am not sure if that deletes everything and I'll have to get...