Browse by Tags

All Tags › security › IIS 6.0 (RSS)

UrlScan not blocking URL segments

I'm using UrlScan 3.0 on IIS 6.0 (IIS 7.0 is not an option). I need to block all requests for URLs which contain "NR" as a path segment: http://localhost/ NR /.... Here's my UrlScan.ini file (most settings are the defaults, changes are in italics, things I think are significant are...

Posted to Forum by RedCrystal on 09-30-2008, 2:45 PM
Ask for password every time

Hello everyone, I have a FTP site setup on IIS 6, Server 2K3 SP2 and have all the access and everything setup properly. But my client wants it to ask for the password everytime he clicks the link and opens the browser. As of now, if he accesses the site, say http://ftp.domain.com , clicks i accept the...

Posted to Forum by mrangoonwala on 09-18-2008, 9:05 PM
URLScan Recycle

In our URLScan logs we get the following quite a bit - - - - - - - - - - - - - - - - - - - - - - - - #Software: Microsoft UrlScan 3.0 #Version: 1.0 #Date: 2008-09-04 01:01:20 - - - - - - - - - - - - - - - - - - - - - - - - Does anyone know if this means that UrlScan is recycling and we have a period...

Posted to Forum by jeremyn11 on 09-05-2008, 2:24 PM
Directory security - streaming PDF files

Win2003/IIS6 I have a "classic" ASP application (intranet) where I need to serve up PDF's from a network share (not just link directly). I have anonymous access turned off, and integrated authentication turned on. Since none of the app users will have direct read access to the share containing...

Posted to Forum by TimWilliams on 08-21-2008, 1:27 PM
IIS 6 / Virtual Directory / UNC Path / Write Failure

We use a third party CMS that claims to provide a load balancing configuration where the end users can edit markup, upload images, etc. to modify the contents of their websites. We are preparing to offer this load balancing/fail over configuration as an option. As a proof of concept I have to configure...

Posted to Forum by KCRick on 08-19-2008, 11:47 AM
Re: Batch script to block ip ranges

Try this blog, I think it would be perfect for your situation: http://www.west-wind.com/WebLog/posts/59731.aspx Nayden

Posted to Forum by naydencho on 08-10-2008, 12:53 PM
IIS Windows Integrated Auth - is it possible to deny multiple logins?

Hi all :) Following up from my previous thread http://forums.iis.net/p/1150483/1874269.aspx#1874269 which is now thankfully resolved, another problem arises :/ Is there a way of allowing only 1 instance of someone using the credentials to access a directory? Example: Say I create a virtual directory...

Posted to Forum by VaeVictis on 07-31-2008, 9:59 AM
Security Issue with IIS6.0 and ASP.NET 3.5

I'm new to administering IIS with ASP.NET, so please bear with me. I recently added a new website to a Windows 2003 server (logged on with local admin privs) and configured it for autonomous access. From IIS Manager on the server, I can browse to the application. However, if I try to open the application...

Posted to Forum by PCalvinClark on 07-29-2008, 1:27 PM
Re: White-Paper on Secure Scalability of IIS 6.0 web apps (Windows Server 2003 R2)

This is excatly what I have been doing for a few years, A collegue and I are in the middle of writing it up as a high level design, hopefully if we can remove the corporate references we will publish this as a paper but a few thing to note so far are We use CIFS (windows shares on sep file server for...

Posted to Forum by species5618 on 04-18-2008, 2:44 PM
Multi-Domain Cert Request Failures

I have a multi-domain environment with an Enterprise CA on the primary domain. I configured the Web Server template to include a security entry for the child domain's "Domain Admins" group with the following rights: Read, Write, Enroll. When I proceed to request a certificate though the...

Posted to Forum by parithon on 02-27-2008, 3:17 AM

Page 1 of 3 (24 items) 1 2 3 Next >