We have been successfully using ARR in our dev and test environments for some time and have had great success. There is one key difference in our production environment that is causing some issues. We have several instances of the app running in vdirs on the same web servers. In dev and test environments...

I am now getting 404 errors from \bin directory files after 2k3r2 sp2 and various security patches were installed. I have multiple w2k3 servers running iis6 with FastCGI 1.5 (x86) RC, and php-5.2.9-2-nts-Win32 Although I do not run asp.net code (the asp.net framework is installed on the server), the...

Hi, My web application runs on Windows Server 2008 and IIS 7. During penetration testing, we found that it was possible to determine the existence of directories within the web root on the system through messages returned by the access control code. This could enable an attacker to target particluar...

Hi, I (through supporting a client) have discovered an issue where hyperlinks / script urls are malformed when any string occurs as both part of the base URL as well as a virtual directory name e.g. "http://trythis.microsoft.com/trythis/myapp.aspx" Has anyone else come across this issue, and...

I have Windows 7 x64 Ultimate installed on my development box. I've done everything needed to get Classic ASP as well as .NET running on my system. I'm developing in Visual Studio 2008 SP1. Me web site has a default page that has a frameset on it. In the frameset, after authorization, one frame...

Hi, My web application runs on Windows server 2008 and IIS7.Currently, we are facing a security issue where in we need to reove the IIS version from the http header. I would be glad if someone can help me out on this. Regards, Sunitha

I have a ASP.NET site that while developing would like to run on my local instance of IIS 7. I am running it in Classic Mode. It works most of the time, but occasionally the site never loads no matter how long I wait. The browser just says "Waiting for localhost...". It does seem to happen...

Hi, I know how to protect my static (HTML) pages in IIS6, and how to do it using the IIS7 Integrated Pipeline, but how can I protect my HTML pages from unauthorised access in IIS7 when running in Classic Mode? It's an ASP.NET site using forms authentication. Thanks!

Thanks, that sounds easy, this is what I've tried (I tried to make my custom xml based on the official ones but didn't succeed, itt seems that because of the missing tab info), but now I think it will work, using the samples. Cheers Mike, sensenet.hu

Hi, I have an ASP.NET 3.5 web site hosted on IIS 7. I need to force the "www" in the URL of my site, so that when users access my site using "http://mysite.com", they get re-directed to "http://www.mysite.com" automatically (address is shown their browser address bar). Does...