IIS 4.0 Security patches

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - double slash not resolving in iis5 Hi I recently migrated from iis4 to iis5. I now find that the web server does not resolve multiple forward slashs in the URL, all i get is a 404 error. Is there a hot fix to resolve this. For example The following URL gets a page not found error in iis5 (this worked under iis4) URL : http://www.myservice.net/home/mobileno///homeno If the URl is change to the following is works: URL : http://www.myservice.net/home/mobileno/null/null/homeno Anyone have any ideas on what is going wrong? Tag: IIS 4.0 Security patches Tag: 317195
  - 2
    - IIS is not longer writting to logs We have installed SUS on Windows 2000 server and SUS requires IIS. The server is working but we are not seeing any event logs in the %WinDir%\System32\LogFiles folder. The server is configured to write a log every hour. Any idea why the logs are not being created? Thanks, Morgan Tag: IIS 4.0 Security patches Tag: 317193
  - 3
    - configure IIS for reverse proxy Hi, Is it possible to configure IIS for reverse proxy ? Thanks Asif Tag: IIS 4.0 Security patches Tag: 317190
  - 4
    - Book on IIS Hi group, I'm new to IIS and rushing to get a job done. Is there a good which help me out with it in less than month ? Thanks in advance Ramsin Savra Tag: IIS 4.0 Security patches Tag: 317186
  - 5
    - IIS simultaneous download limit? I have links generated on web pages to files for download, but the anonymous account seems limited to only 2 at a time. How can I increase that? Is there a difference once I implement logging in with an account? Also, Any comments on HTTP downloads vs. FTP? Also again, I have a 3rd party FTP server running. Are there any advantages to running Microsoft FTP vs a third party other than integrated security. (Excluding performance related things?) Tag: IIS 4.0 Security patches Tag: 317182
  - 6
    - SSL in IIS? This is a multi-part message in MIME format. ------=_NextPart_000_0046_01C3C4F0.9F029E90 Content-Type: text/plain; charset="windows-1254" Content-Transfer-Encoding: quoted-printable I'm using Windows XP Pro and I have IIS 5.1 Web Server. How can I make a secure connection? Am I have to pay for this? (I heard I have to be a certificate, how can I take it?) ------=_NextPart_000_0046_01C3C4F0.9F029E90 Content-Type: text/html; charset="windows-1254" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Dwindows-1254"> <META content=3D"MSHTML 6.00.2734.1600" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3D"Comic Sans MS" color=3D#0000ff size=3D2>I'm using = Windows XP Pro=20 and I have IIS 5.1 Web Server.</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" color=3D#0000ff size=3D2>How can I = make a secure=20 connection? Am I have to pay for this?</FONT></DIV> <DIV><FONT face=3D"Comic Sans MS" color=3D#0000ff size=3D2>(I heard I = have to be a=20 certificate, how can I take it?)</FONT></DIV></BODY></HTML> ------=_NextPart_000_0046_01C3C4F0.9F029E90-- Tag: IIS 4.0 Security patches Tag: 317172
  - 7
    - IIS Crashes, DLLHOST errors, SQLSERVR uses 100% RAM I actually posted last week because DLLHOST was using all the processor, but after setting all sites to run in High process that seems to have fixed THAT issue, but I'm still having issues. Let me start by saying that I am fully patched and fully updated, with antivirus running. Now twice today IIS has crashed bringing down all sites running on Access databases. None of the sites running on Access get a lot of hits. The first time it went down this morning, I quick opened it up to restart it, but thought I'd check the processes first. SQLSERVR.exe was using over 300MB of RAM. I quick restarted the machine without thinking too hard about it. The second time it went down I quick restarted and after it came back up I checked the Event Log. Here is what I'm getting from Event Viewer: ================= Event Type: Information Event Source: Application Popup Event Category: None Event ID: 26 Date: 12/17/2003 Time: 2:08:50 PM User: N/A Computer: GILLIGAN Description: Application popup: dllhost.exe - Application Error : The instruction at "0x6a9f93d9" referenced memory at "0x01991f50". The memory could not be "read". ================= AND ================= Event Type: Information Event Source: Application Popup Event Category: None Event ID: 26 Date: 12/17/2003 Time: 2:08:54 PM User: N/A Computer: GILLIGAN Description: Application popup: dllhost.exe - Application Error : The instruction at "0x6a9f93d9" referenced memory at "0x01952010". The memory could not be "read". ================ I did a little searching on Google and these are similar to errors caused by Welchia. I've double-checked that we are patched against Welchia and ran a full virus scan. None of the Welchia processes or executables are on the server. I'm stuck folks, and could use all the help you can afford to give. Thanks so much in advance, I appreciate it, Matt Stanzel Tag: IIS 4.0 Security patches Tag: 317171
  - 8
    - Some pages won't open (XP Pro, IIS 5.1) Hello, I built an ASP/VBScript website on my laptop which is running XP Pro and IIS 5.1. The entire site works fine. I copied the website folder to my desktop, also running XP Pro and IIS 5.1, so the folder permissions should be the same. Most of the site works fine except that the few pages with thumbnails linked to JPEGs that open in a window via Javascript, won't open. The system just clocks. Each page has its own images folder. Any help would be appreciated. Thanks, Bernie Tag: IIS 4.0 Security patches Tag: 317154
  - 9
    - Multiple Virtual Hosts I need to create multiple virtual hosts in IIS 6.0 according to Microsoft's KBArticle 324287, however, at the bottom it says multiple hosts need to be mapped tot he single IP address w/ DNS, can you tell me specifically what record needs added and how it should be configured. Tag: IIS 4.0 Security patches Tag: 317151
  - 10
    - installing IIS on XP pro Hi, I just upgraded to XP pro and installed the IIS component but I don't see the program on my system. Thanks Tag: IIS 4.0 Security patches Tag: 317148
  - 11
    - Virtual Servers with IIS 4? Running NT 40 SP6a server with IIS 4.0 SP1.3. I have multihomed the nic with 2 IP addresses. I want to host two completely different web sites each with Frontpage Server Extensions. FPSE can only be configured for the default web site (as far as I can tell). How do I create a virtual server for the second IP address so I can host two domains on this server? Tag: IIS 4.0 Security patches Tag: 317146
  - 12
    - ASP.NET not working with IIS 5.1 and VS.NET 2003 When trying to create a new C# ASP.NET Web application, after entering the location (e.g., http://localhost/MyWebTest), click OK, I get the following error: "The Web server reported the following error when attempting to create or open the Web project located at the following URL: 'http://localhost/MyWebTest'. 'HTTP/1.1 500 Server Error'. When I look at the event log I see: "The server failed to load application '/LM/W3SVC'. The error was 'The specified metadata was not found.'." Eveny ID 36. I created MyWebTest in IIS before trying to create the project. I can display a .htm file there (e.g., http://localhost/readme.htm) but not a simple .aspx file. IE displays: "Server Application Error - The server has encountered an error while loading an application during the processing of your request. Please refer to the event log for more detail information. Please contact the server administrator for assistance." The event log is the same as above. I have uninstalled/reinstalled IIS, reinstalled the 1.1 Framework (and all the other required components, reinstalled .NET 2003 (no uninstall, just reinstall). I also have run aspnet_regiis -i. aspenet_regiis -lk displays: W3SVC/ 1.1.4322.0 W3SVC/1/ROOT/ 1.1.4322.0 W3SVC/1/ROOT/Printers/ 1.1.4322.0 Can anyone help? Tag: IIS 4.0 Security patches Tag: 317139
  - 13
    - Opening attachments in Outlook Express I've no idea if I am even in the right place in this labyrinth, but here goes: I am unable to open attachments in my Outlook Express Mail account - any ideas why? Anybody? My home business depends on an accurate reply...Thanks Tag: IIS 4.0 Security patches Tag: 317136
  - 14
    - IIS asp, easy question Hello, I am trying to develop an ASP.net application using Visual Studio .Net 2003. When I attempt to create the project, it gives me an error stating that the IIS on my hosting server may not be compatible and the active directory cannot find the web server. The server is running Windows 2000, IE 5.5. Is there some sort of patch I can download to allow me to create ASP projects on that server? Or something I should install? Any help is appreciated. Thanks, Sean Tag: IIS 4.0 Security patches Tag: 317129
  - 15
    - IIS 6.0 Publishing Problems Hello All. I'm having trouble publishing my company's website to IIS 6. I setup a new website directory, made the default home directory, and put my documents in there for publishing. For IP address, I selected All Unassigned. Underneath All Unassigned, there's only one IP address, which is for my Exchange. Could this cause problems? When I do nslookup, I get a mail.domainname.com, and it says it can't find www.domainname.com. My domain is registered with Register.com. I get Register.com's default page that says this domain has recently been registered when typing the company's URL in. What is going wrong? Can somebody please point me in the right direction? I really appreciate it. Thank you. Tag: IIS 4.0 Security patches Tag: 317124
  - 16
    - Server object error 'ASP 0177 : 800401f3' after Office 2003 Upgrade I have an asp page that was working fine with Office XP OWC. After upgrading to Office 2003, I received this error message: Server object error 'ASP 0177 : 800401f3' Server.CreateObject Failed /sapcssrpt/rt/functions.asp, line 3 Invalid ProgID. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. The first few lines of functions.asp are: Function barChartImage(strTitle, strCategory, strValues, aryData, aryLabel, strColor, intWidth, intHight, strFormat, strMax, strMin) Set objChartSpace = Server.CreateObject("OWC.Chart") Set objChart = objChartSpace.Charts.Add Set c = objChartSpace.Constants I tried re-register OWC11.DLL, but that did not help. Any Suggestions? Tag: IIS 4.0 Security patches Tag: 317122
  - 17
    - iishelp navigation pane problem Just starting. I can't get "Contents" or "Index" to work in the iishelp Navigation Pane. "Search" does work. WXPPro, iis5.1, NTFS, Corporate Install, indexing service is on and started, employer will not install FP server Extensions on their web servers. Clicking "Contents" and the synchronization button produces an "error on page" message at the bottom of the screen. Clicking "Index" produces a white rectangle with an image icon. The "Search" function seems to work. Has anyone seen and solved this problem? Thanks Tag: IIS 4.0 Security patches Tag: 317121
  - 18
    - Global.asa Configuration Does anyone have a link to a good article on the different options and the structure for writing a global.asa file Thanks much! Tag: IIS 4.0 Security patches Tag: 317120
  - 19
    - Outlook WebAccess (Exchange 2003) with SSL on IIS 6 (Windows 2003) Hello, I want to use Outlook WebAccess (Exchange 2003) with SSL on an IIS 6 which is running on a Windows 2003 server. I have created a certificate successfully. After I have installed this on the default website you cannot connect to the https/SSL port 443. But the IIS is listening on this port. The connect to the default port 80 is working nevertheless. What went wrong? What can I do in order to use Outlook WebAccess (Exchange 2003) with SSL on IIS 6 (Windows 2003)? Kind regards, Andreas Tag: IIS 4.0 Security patches Tag: 317117
  - 20
    - puzzled by log file many 404.html When viewing the stats for two fo my sites, the top found pages are 404.html. I do nto have any dead links, nor am I runnign any waky scripts that would cause the pages to crash. Can anyone shed some light on this? From my log file... cs-method for many entries is /404.html cs-uri-stem for the corresponding is entries are 404;http://my domain name/slices/overgallery.jpg I am confused an in need of help. Thanks Tag: IIS 4.0 Security patches Tag: 317115
  - 21
    - IIS & Accpac CRM ASP Pages Performance tweaks Can anyone point me in the right direction on a good document for tweaking ASP Performance for ASP pages on a IIS V5.1 setup? At the moment the server runs like a dog. There is 2gb ram and also 2 X 1gb intel 3 processors with tons of space. any help is much accepted. Thanks Mark Cowley Tag: IIS 4.0 Security patches Tag: 317113
  - 22
    - Why do I get popup form when Integrated Windows authentication is checked? Integrated Windows authentication is the only option checked on the web site Directory Security page. Everything else (Anonymous, Basic, Digest) is unchecked. My is understanding of it is that IIS is supposed to authenticate a user, and apparently if fails to do so because when the user hits the site, IIS pops up the form with user, domain and password. I would understand this behaviour if I the Basic Authentication was checked, but it is not the case. How can I find out why IIS cannot authenticate the user? There is nothing in the event log. The requesting user is in the same domain... Thanks, -Stan Tag: IIS 4.0 Security patches Tag: 317112
  - 23
    - ASP Authentication issue I have just tried the most basic HELLO WORLD ASP and I am still getting the authetication prompt. I have Win2KServ, IIS5. I still think it is permissions, and I have it set as ; ANONYMOUS ACCESS; Checked INTEGRATED WINDS AUTH: Tried both checked and unchecked (unchecked just says that 'You are not auth. to view this page') USER NAME: IUSR_TESTSERV I have just set up a basic (so far internal) web page with a basic default.htm and menu.asp. When I go to www.website.com, it brings up the defualt.htm page with no problems. If I go to www.website.com\menu.asp, it immediately prompts for the Login/ Pass/ Domain. Both the ASP and the HTM files are in the same directory withthe same permissions. If I enter the admin login and pass for the server, it displays the page properly with no issues. Otherwise, it says YOU ARE NOT AUTH. TO VIEW THIS PAGE. Why does this do this for the ASP and not the HTM? Both files are in the same directory with the same persmissions. I appreciate the help. Tag: IIS 4.0 Security patches Tag: 317109
  - 24
    - Why does IIS 5.0 stop serving ASP pages? My asp applications become corrupt occasionally. IIS is still running, most functions work (HTML pages and images etc. still serve correctly), but ASP pages no longer run properly. These scripts seem to timeout endlessly, never returning an error message or timeout warning (unless generated by the browser). The browser error message is: http/1.1 New Session Failed The iis log error after the client loading error is: ASP_0146|New_Session_Failed 500 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) Tag: IIS 4.0 Security patches Tag: 317108
  - 25
    - CGI-BIN Error This CGI Script was build for a unix platform. We have merge to IIS 6 under windows 2003 Enterprise Server Edition and this CGI Script dosen't work on my web page. I have put the folder CGI-BIN in my INETPUB/WWWMYDOMAIN. The content of my DOMAIN folder is: CGI-BIN, FLASH, INDEX, HTM Any Idea??? Thanks! Here is the script ---------------------------------------------------------------------------- ---------------------------------------------- #!/opt/bin/perl ############################################################################ ## # FormMail Version 1.6 # # Copyright 1995-1997 Matt Wright mattw@worldwidemart.com # # Created 06/09/95 Last Modified 05/02/97 # # Matt's Script Archive, Inc.: http://www.worldwidemart.com/scripts/ # ############################################################################ ## # COPYRIGHT NOTICE # # Copyright 1995-1997 Matthew M. Wright All Rights Reserved. # # # # FormMail may be used and modified free of charge by anyone so long as this # # copyright notice and the comments above remain intact. By using this # # code you agree to indemnify Matthew M. Wright from any liability that # # might arise from its use. # # # # Selling the code for this program without prior written consent is # # expressly forbidden. In other words, please ask first before you try and # # make money off of my program. # # # # Obtain permission before redistributing this software over the Internet or # # in any other medium. In all cases copyright and header must remain intact # ############################################################################ ## # Define Variables # # Detailed Information Found In README File. # # $mailprog defines the location of your sendmail program on your unix # # system. # $mailprog = '/usr/lib/sendmail'; # @referers allows forms to be located only on servers which are defined # # in this field. This security fix from the last version which allowed # # anyone on any server to use your FormMail script on their web site. # @referers = ('MYDOMAIN','MYIP'); # Done # ############################################################################ ## # Check Referring URL &check_url; # Retrieve Date &get_date; # Parse Form Contents &parse_form; # Check Required Fields &check_required; # Return HTML Page or Redirect User &return_html; # Send E-Mail &send_mail; sub check_url { # Localize the check_referer flag which determines if user is valid. # local($check_referer) = 0; # If a referring URL was specified, for each valid referer, make sure # # that a valid referring URL was passed to FormMail. # if ($ENV{'HTTP_REFERER'}) { foreach $referer (@referers) { if ($ENV{'HTTP_REFERER'} =~ m|https?://([^/]*)$referer|i) { $check_referer = 1; last; } } } else { $check_referer = 1; } # If the HTTP_REFERER was invalid, send back an error. # if ($check_referer != 1) { &error('bad_referer') } } sub get_date { # Define arrays for the day of the week and month of the year. # @days = ('Sunday','Monday','Tuesday','Wednesday', 'Thursday','Friday','Saturday'); @months = ('January','February','March','April','May','June','July', 'August','September','October','November','December'); # Get the current time and format the hour, minutes and seconds. Add # # 1900 to the year to get the full 4 digit year. # ($sec,$min,$hour,$mday,$mon,$year,$wday) = (localtime(time))[0,1,2,3,4,5,6]; $time = sprintf("%02d:%02d:%02d",$hour,$min,$sec); $year += 1900; # Format the date. # $date = "$days[$wday], $months[$mon] $mday, $year at $time"; } sub parse_form { # Define the configuration associative array. # %Config = ('recipient','', 'subject','', 'email','', 'realname','', 'redirect','', 'bgcolor','', 'background','', 'link_color','', 'vlink_color','', 'text_color','', 'alink_color','', 'title','', 'sort','', 'print_config','', 'required','', 'env_report','', 'return_link_title','', 'return_link_url','', 'print_blank_fields','', 'missing_fields_redirect',''); # Determine the form's REQUEST_METHOD (GET or POST) and split the form # # fields up into their name-value pairs. If the REQUEST_METHOD was # # not GET or POST, send an error. # if ($ENV{'REQUEST_METHOD'} eq 'GET') { # Split the name-value pairs @pairs = split(/&/, $ENV{'QUERY_STRING'}); } elsif ($ENV{'REQUEST_METHOD'} eq 'POST') { # Get the input read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'}); # Split the name-value pairs @pairs = split(/&/, $buffer); } else { &error('request_method'); } # For each name-value pair: # foreach $pair (@pairs) { # Split the pair up into individual variables. # local($name, $value) = split(/=/, $pair); # Decode the form encoding on the name and value variables. # $name =~ tr/+/ /; $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; $value =~ tr/+/ /; $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; # If they try to include server side includes, erase them, so they # aren't a security risk if the html gets returned. Another # security hole plugged up. $value =~ s///g; # If the field name has been specified in the %Config array, it will # # return a 1 for defined($Config{$name}}) and we should associate # # this value with the appropriate configuration variable. If this # # is not a configuration form field, put it into the associative # # array %Form, appending the value with a ', ' if there is already a # # value present. We also save the order of the form fields in the # # @Field_Order array so we can use this order for the generic sort. # if (defined($Config{$name})) { $Config{$name} = $value; } else { if ($Form{$name} && $value) { $Form{$name} = "$Form{$name}, $value"; } elsif ($value) { push(@Field_Order,$name); $Form{$name} = $value; } } } # The next six lines remove any extra spaces or new lines from the # # configuration variables, which may have been caused if your editor # # wraps lines after a certain length or if you used spaces between field # # names or environment variables. # $Config{'required'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'required'} =~ s/(\s+)?\n+(\s+)?//g; $Config{'env_report'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'env_report'} =~ s/(\s+)?\n+(\s+)?//g; $Config{'print_config'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'print_config'} =~ s/(\s+)?\n+(\s+)?//g; # Split the configuration variables into individual field names. # @Required = split(/,/,$Config{'required'}); @Env_Report = split(/,/,$Config{'env_report'}); @Print_Config = split(/,/,$Config{'print_config'}); } sub check_required { # Localize the variables used in this subroutine. # local($require, @error); if (!$Config{'recipient'}) { if (!defined(%Form)) { &error('bad_referer') } else { &error('no_recipient') } } # For each require field defined in the form: # foreach $require (@Required) { # If the required field is the email field, the syntax of the email # # address if checked to make sure it passes a valid syntax. # if ($require eq 'email' && !&check_email($Config{$require})) { push(@error,$require); } # Otherwise, if the required field is a configuration field and it # # has no value or has been filled in with a space, send an error. # elsif (defined($Config{$require})) { if (!$Config{$require}) { push(@error,$require); } } # If it is a regular form field which has not been filled in or # # filled in with a space, flag it as an error field. # elsif (!$Form{$require}) { push(@error,$require); } } # If any error fields have been found, send error message to the user. # if (@error) { &error('missing_fields', @error) } } sub return_html { # Local variables used in this subroutine initialized. # local($key,$sort_order,$sorted_field); # If redirect option is used, print the redirectional location header. # if ($Config{'redirect'}) { print "Location: $Config{'redirect'}\n\n"; } # Otherwise, begin printing the response page. # else { # Print HTTP header and opening HTML tags. # print "Content-type: text/html\n\n"; print "<html>\n <head>\n"; # Print out title of page # if ($Config{'title'}) { print " <title>$Config{'title'}</title>\n" } else { print " <title>Merci</title>\n" } print " </head>\n <body"; # Get Body Tag Attributes # &body_attributes; # Close Body Tag # print ">\n <center>\n"; # Print custom or generic title. # if ($Config{'title'}) { print " <h1>$Config{'title'}</h1>\n" } else { print " <h1>Thank You For Filling Out This Form</h1>\n" } print "</center>\n"; print " The information below was sent to $Config{'recipient'} on "; print "$date<p><hr size=1 width=75\%><p>\n"; # Sort alphabetically if specified: # if ($Config{'sort'} eq 'alphabetic') { foreach $field (sort keys %Form) { # If the field has a value or the print blank fields option # # is turned on, print out the form field and value. # if ($Config{'print_blank_fields'} || $Form{$field}) { print "<b>$field:</b> $Form{$field}<p>\n"; } } } # If a sort order is specified, sort the form fields based on that. # elsif ($Config{'sort'} =~ /^order:.*,.*/) { # Set the temporary $sort_order variable to the sorting order, # # remove extraneous line breaks and spaces, remove the order: # # directive and split the sort fields into an array. # $sort_order = $Config{'sort'}; $sort_order =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $sort_order =~ s/(\s+)?\n+(\s+)?//g; $sort_order =~ s/order://; @sorted_fields = split(/,/, $sort_order); # For each sorted field, if it has a value or the print blank # # fields option is turned on print the form field and value. # foreach $sorted_field (@sorted_fields) { if ($Config{'print_blank_fields'} || $Form{$sorted_field}) { print "<b>$sorted_field:</b> $Form{$sorted_field}<p>\n"; } } } # Otherwise, default to the order in which the fields were sent. # else { # For each form field, if it has a value or the print blank # # fields option is turned on print the form field and value. # foreach $field (@Field_Order) { if ($Config{'print_blank_fields'} || $Form{$field}) { print "<b>$field:</b> $Form{$field}<p>\n"; } } } print "<p><hr size=1 width=75%><p>\n"; # Check for a Return Link and print one if found. # if ($Config{'return_link_url'} && $Config{'return_link_title'}) { print "<ul>\n"; print "<li><a href=\"$Config{'return_link_url'}\">$Config{'return_link_title'}</a>\n"; print "</ul>\n"; } # Print the page footer. # print <<"(END HTML FOOTER)"; <hr size=1 width=75%><p> <center><font size=-1> </body> </html> (END HTML FOOTER) } } sub send_mail { # Localize variables used in this subroutine. # local($print_config,$key,$sort_order,$sorted_field,$env_report); # Open The Mail Program open(MAIL,"|$mailprog -t"); print MAIL "To: $Config{'recipient'}\n"; print MAIL "From: $Config{'email'} ($Config{'realname'})\n"; # Check for Message Subject if ($Config{'subject'}) { print MAIL "Subject: $Config{'subject'}\n\n" } else { print MAIL "Subject: WWW Form Submission\n\n" } print MAIL "Below is the result of your feedback form. It was submitted by\n"; print MAIL "$Config{'realname'} ($Config{'email'}) on $date\n"; print MAIL "-" x 75 . "\n\n"; if (@Print_Config) { foreach $print_config (@Print_Config) { if ($Config{$print_config}) { print MAIL "$print_config: $Config{$print_config}\n\n"; } } } # Sort alphabetically if specified: # if ($Config{'sort'} eq 'alphabetic') { foreach $field (sort keys %Form) { # If the field has a value or the print blank fields option # # is turned on, print out the form field and value. # if ($Config{'print_blank_fields'} || $Form{$field} || $Form{$field} eq '0') { print MAIL "$field: $Form{$field}\n\n"; } } } # If a sort order is specified, sort the form fields based on that. # elsif ($Config{'sort'} =~ /^order:.*,.*/) { # Remove extraneous line breaks and spaces, remove the order: # # directive and split the sort fields into an array. # $Config{'sort'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'sort'} =~ s/(\s+)?\n+(\s+)?//g; $Config{'sort'} =~ s/order://; @sorted_fields = split(/,/, $Config{'sort'}); # For each sorted field, if it has a value or the print blank # # fields option is turned on print the form field and value. # foreach $sorted_field (@sorted_fields) { if ($Config{'print_blank_fields'} || $Form{$sorted_field} || $Form{$sorted_field} eq '0') { print MAIL "$sorted_field: $Form{$sorted_field}\n\n"; } } } # Otherwise, default to the order in which the fields were sent. # else { # For each form field, if it has a value or the print blank # # fields option is turned on print the form field and value. # foreach $field (@Field_Order) { if ($Config{'print_blank_fields'} || $Form{$field} || $Form{$field} eq '0') { print MAIL "$field: $Form{$field}\n\n"; } } } print MAIL "-" x 75 . "\n\n"; # Send any specified Environment Variables to recipient. # foreach $env_report (@Env_Report) { if ($ENV{$env_report}) { print MAIL "$env_report: $ENV{$env_report}\n"; } } close (MAIL); } sub check_email { # Initialize local email variable with input to subroutine. # $email = $_[0]; # If the e-mail address contains: # if ($email =~ /(@.*@)|(\.\.)|(@\.)|(\.@)|(^\.)/ || # the e-mail address contains an invalid syntax. Or, if the # # syntax does not match the following regular expression pattern # # it fails basic syntax verification. # $email !~ /^.+\@(\[?)[a-zA-Z0-9\-\.]+\.([a-zA-Z]{2,3}|[0-9]{1,3})(\]?)$/) { # Basic syntax requires: one or more characters before the @ sign, # # followed by an optional '[', then any number of letters, numbers, # # dashes or periods (valid domain/IP characters) ending in a period # # and then 2 or 3 letters (for domain suffixes) or 1 to 3 numbers # # (for IP addresses). An ending bracket is also allowed as it is # # valid syntax to have an email address like: user@[255.255.255.0] # # Return a false value, since the e-mail address did not pass valid # # syntax. # return 0; } else { # Return a true value, e-mail verification passed. # return 1; } } sub body_attributes { # Check for Background Color if ($Config{'bgcolor'}) { print " bgcolor=\"$Config{'bgcolor'}\"" } # Check for Background Image if ($Config{'background'}) { print " background=\"$Config{'background'}\"" } # Check for Link Color if ($Config{'link_color'}) { print " link=\"$Config{'link_color'}\"" } # Check for Visited Link Color if ($Config{'vlink_color'}) { print " vlink=\"$Config{'vlink_color'}\"" } # Check for Active Link Color if ($Config{'alink_color'}) { print " alink=\"$Config{'alink_color'}\"" } # Check for Body Text Color if ($Config{'text_color'}) { print " text=\"$Config{'text_color'}\"" } } sub error { # Localize variables and assign subroutine input. # local($error,@error_fields) = @_; local($host,$missing_field,$missing_field_list); if ($error eq 'bad_referer') { if ($ENV{'HTTP_REFERER'} =~ m|^https?://([\w\.]+)|i) { $host = $1; print <<"(END ERROR HTML)"; Content-type: text/html <html> <head> <title>Bad Referrer - Access Denied</title> </head> <body bgcolor=#FFFFFF text=#000000> <center> <table border=0 width=600 bgcolor=#9C9C9C> <tr><th><font size=+2>Bad Referrer - Access Denied</font></th></tr> </table> <table border=0 width=600 bgcolor=#CFCFCF> <tr><td>The form attempting to use <a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> resides at <tt>$ENV{'HTTP_REFERER'}</tt>, which is not allowed to access this cgi script.<p> If you are attempting to configure FormMail to run with this form, you need to add the following to \@referers, explained in detail in the README file.<p> Add <tt>'$host'</tt> to your <tt><b>\@referers</b></tt> array.<hr size=1> <center><font size=-1> <a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> V1.6 © 1995 - 1997 Matt Wright<br> A Free Product of <a href="http://www.worldwidemart.com/scripts/">Matt's Script Archive, Inc.</a> </font></center> </td></tr> </table> </center> </body> </html> (END ERROR HTML) } else { print <<"(END ERROR HTML)"; Content-type: text/html <html> <head> <title>FormMail v1.6</title> </head> <body bgcolor=#FFFFFF text=#000000> <center> <table border=0 width=600 bgcolor=#9C9C9C> <tr><th><font size=+2>FormMail</font></th></tr> </table> <table border=0 width=600 bgcolor=#CFCFCF> <tr><th><tt><font size=+1>Copyright 1995 - 1997 Matt Wright<br> Version 1.6 - Released May 02, 1997<br> A Free Product of <a href="http://www.worldwidemart.com/scripts/">Matt's Script Archive, Inc.</a></font></tt></th></tr> </table> </center> </body> </html> (END ERROR HTML) } } elsif ($error eq 'request_method') { print <<"(END ERROR HTML)"; Content-type: text/html <html> <head> <title>Error: Request Method</title> </head> <body bgcolor=#FFFFFF text=#000000> <center> <table border=0 width=600 bgcolor=#9C9C9C> <tr><th><font size=+2>Error: Request Method</font></th></tr> </table> <table border=0 width=600 bgcolor=#CFCFCF> <tr><td>The Request Method of the Form you submitted did not match either <tt>GET</tt> or <tt>POST</tt>. Please check the form and make sure the <tt>method=</tt> statement is in upper case and matches <tt>GET</tt> or <tt>POST</tt>.<p> <center><font size=-1> <a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> V1.6 © 1995 - 1997 Matt Wright<br> A Free Product of <a href="http://www.worldwidemart.com/scripts/">Matt's Script Archive, Inc.</a> </font></center> </td></tr> </table> </center> </body> </html> (END ERROR HTML) } elsif ($error eq 'no_recipient') { print <<"(END ERROR HTML)"; Content-type: text/html <html> <head> <title>Error: No Recipient</title> </head> <body bgcolor=#FFFFFF text=#000000> <center> <table border=0 width=600 bgcolor=#9C9C9C> <tr><th><font size=+2>Error: No Recipient</font></th></tr> </table> <table border=0 width=600 bgcolor=#CFCFCF> <tr><td>No Recipient was specified in the data sent to FormMail. Please make sure you have filled in the 'recipient' form field with an e-mail address. More information on filling in recipient form fields can be found in the README file.<hr size=1> <center><font size=-1> <a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> V1.6 © 1995 - 1997 Matt Wright<br> A Free Product of <a href="http://www.worldwidemart.com/scripts/">Matt's Script Archive, Inc.</a> </font></center> </td></tr> </table> </center> </body> </html> (END ERROR HTML) } elsif ($error eq 'missing_fields') { if ($Config{'missing_fields_redirect'}) { print "Location: $Config{'missing_fields_redirect'}\n\n"; } else { foreach $missing_field (@error_fields) { $missing_field_list .= " <li>$missing_field\n"; } print <<"(END ERROR HTML)"; Content-type: text/html <html> <head> <title>Error: Blank Fields</title> </head> <center> <table border=0 width=600 bgcolor=#9C9C9C> <tr><th><font size=+2>Error: Blank Fields</font></th></tr> </table> <table border=0 width=600 bgcolor=#CFCFCF> <tr><td>The following fields were left blank in your submission form:<p> <ul> $missing_field_list </ul><br> These fields must be filled in before you can successfully submit the form.<p> Please use your browser's back button to return to the form and try again.<hr size=1> <center><font size=-1> <a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> V1.6 © 1995 - 1997 Matt Wright<br> A Free Product of <a href="http://www.worldwidemart.com/scripts/">Matt's Script Archive, Inc.</a> </font></center> </td></tr> </table> </center> </body> </html> (END ERROR HTML) } } exit; } Tag: IIS 4.0 Security patches Tag: 317104
- Next
  - 1
    - Access Denied Exception When Using DirectoryEntry get Access Denied (System.Runtime.InteropServices.COMException) When trying to use DirectoryEntry on IIS via ASP.NET application. The same code I use is not generating this Exception while running in Console mode. Sample Code : DirectoryEntry obDirEntry = new DirectoryEntry (IISPrefix + ComputerName + IISRoot, UserName, Password); I tried also using impersonate in web config using admin account but still the same problem. Any Ideas ??? 10x. Tag: IIS 4.0 Security patches Tag: 317101
  - 2
    - No property pages in IIS administration web site When i use the IIS administration web site, clicking on any of the Properties links appears to do nothing. Other links, such as Permission Wizard, New etc work correctly, its just Properties and Master Properties that have the problem. This occurs whether i try to browse the site from another PC or locally on the web server itself. Tag: IIS 4.0 Security patches Tag: 317099
  - 3
    - SSL WTLS Error from P800 Hi! I have created an certificate with OpenSSL and installed it on my webserver (IIS). I can browse the site with an Internet Explorer (IE) without problem and get a secure connection. When I try to reach the page with my P800 I get "Access Denied Technical Description: 403 Forbidden - To access this resource you need a secure transfer protocol (WTLS)" with its ordinary browser and just an error when I try to browse it with Opera for P800. Q: Is it the certificate (because of OpenSSL) that is the problem or do I have to make any configuration of the IIS to get it to work?! Please help! Anyone who know? I have tried the ".crt applicatio/... MIME" configuration in IIS (wap), do I need that stuff? Regards /Marcus Tag: IIS 4.0 Security patches Tag: 317098
  - 4
    - Recieving a message when I am trying to submit order Recieving a message when I am trying to submit order and then the order is suppose to send an email to the person handling the orders using SMTP HTTP 500.100 - Internal Server Error - ASP error Internet Information Services Error Type: Microsoft VBScript runtime (0x800A0046) Permission denied /coegiftshop/secure/submit_order.asp, line 117 Tag: IIS 4.0 Security patches Tag: 317089
  - 5
    - unable to start FTP WWW and SMTP services When trying to start the FTP WWW and SMTP services I get an Object already exists error. Since I don't work with IIS much I'm stuck.help! Tag: IIS 4.0 Security patches Tag: 317087
  - 6
    - Change Realm in Metabase How would I change the Realm in Metabase? Please list each step. If for some reason I needed to change to back to it's orginial state how would I do this? Tag: IIS 4.0 Security patches Tag: 317085
  - 7
    - Immages not rendering I have created a ASP.NET application on my machine. When I browse the application through IE, the images are not getting displayed. The same .NET application when installed on a different machine and browsed from my machine renders the images without problems. What could be the problem here? Any IIS settings that I should take care of? Please help Tag: IIS 4.0 Security patches Tag: 317084
  - 8
    - IIS doesn't pick up database change we are doing depoyment, and found that although we changed the database string to point to new database in web.config, the webapplication still connect to old database. Would anyone can tell me what's caused this, and any solution beside restart web server? Thanks. Chang Tag: IIS 4.0 Security patches Tag: 317083
  - 9
    - IIS v5 Command-Line I have generated a VB script with SYSOCMGR to install IIS using different configuration options. These options include default document location. I have been unable to find a command-line program that will allow me to install, configure a web site once IIS installed. I need to setup thing such as Default Document, Log File Location and setup, IP Address, ISAPI Filter, Home Directory settings, etc. I have been able to find many of these for IIS 6 but not for v5. Our implementation of Server 2003 therefore a majority of installs are still IIS v5. Thanks, J. Henderson henderson_john_p@cat.com Tag: IIS 4.0 Security patches Tag: 317074
  - 10
    - IIS won't start, metabase file missing etc... Hi all I upgraded a Windows NT4 Server to W2000 Adv. Server and my IIS server stopped working. I also installed W2000 SP4 and Internet Explorer 6.0. I tried to uninstall IIS 5 and install it again, but no results. Other symptoms: I have no metabase.bin (nor metabase backups) in my hard disk. I installed metaedit 2.2 I get an error trying to start it: "A fatal error occurred trying to connect to LOCALHOST". I also get errors when I start the server machine, in the event viewer: "the service metabase path /LM/W3SVC/ could not be opened". I get the analog errors for MSFTPSVC, SMTPSVC and NNTPSVC. Also: "The system cannot find the path specified" for all of them The strange thing is that even uninstalling all the IIS 5 and reinstalling again it happens the same.... Any light on this please Thank you. Tag: IIS 4.0 Security patches Tag: 317068
  - 11
    - URGENT: IIS headaches! Hi, I have recently installed MS VS.net Ent Arc 2003. During the installation I was asked to install IIS as part of the pre-requisites. The IIS installation went fine. I cannot create a web project in VS.net. I get a HTML 500 error. When I try to connect to Http://localhost I get an error page - leading me to believe that IIS is at fault not VS.net. I have viewed the event log: After attempting to create a project in VS.net the error is reported as 'Specified metadata not found'. The error reported after connecting to http://localhost is 'Class not Registered'. I have ran aspnet_regiis - i. And granted Administrative permissions to the user ASP.net (this is a stand alone development machine so there are no security considerations). Any help would be sincerely appreciated as I have a pending deadline and hitting my head against a brick wall is starting to make my head ache! :) Thanks Matt Tag: IIS 4.0 Security patches Tag: 317065
  - 12
    - can you force ssl on a website is there a way in iis to make sure any requests for a website uses ssl (https) even if they just type www.domain.com or if they type http://www.domain.com, can iis be used to make it go to ssl/https?? many thanks david Tag: IIS 4.0 Security patches Tag: 317058
  - 13
    - ORACLE 8i Database connection error I have ORACLE 8i on WINDOWS 2000 Server platform. To connect to hte database,i enter the following datas usename: scott password:tiger hostname:my computer name or IP address. But it gives me an error... ORA-12154:TNS could not resolve the service name What should i do on this. *** Sent via Developersdex http://www.developersdex.com *** Don't just participate in USENET...get rewarded for it! Tag: IIS 4.0 Security patches Tag: 317046
  - 14
    - enumerating web sites in ADSI script? i have written a script which changes the paths of virtual directories on a list of web servers (for a given site on each server). i'd like to specify the site(s) by name (stored in the API as "ServerComment"?), but the examples i find locate sites only by number. i've written the attached small function which counts integers up from one and looks for a match on the name passed. however this is somewhat inelegant and it would fail to find a site if there were gaps in the numeric "names" of the sites (e.g. define sites 1,2,3,4,5 then delete site 3) and the site i was looking for was "after" the gap. does anyone know a way to iterate over the web sites themselves? (or to find one by comment directly?) cheers, Tim Hanson function fnFindServerByName(sHostName, sIISsiteName) { //var reSiteName = new RegExp("^" + sIISsiteName + "$", "i"); for (var i =1; ;i++ ) { try { oServer = GetObject("IIS://"+ sHostName + "/W3SVC/"+ i); var sThisName = oServer.ServerComment; if (sThisName == sIISsiteName) { WScript.Echo("Match!!" + sThisName + " matches site " + i); return oServer; } } catch(errObj) { WScript.Echo(errObj); WScript.Echo(errObj.number & 0xFFFF); WScript.Echo(errObj.description); break; } } return null; } Tag: IIS 4.0 Security patches Tag: 317045
  - 15
    - finding virtual directories Dear All, I would like to know if does exist a specific tool (Microsoft or thirdy party) able to list virtual directories in a selected machine without browsing IIS among a complex tree structure. Regards Alberto Brivio Tag: IIS 4.0 Security patches Tag: 317043
  - 16
    - I was hacked and now I cannot remove files. Hello all, The server of one of my clients was hacked via an open FTP site in IIS (a Xerox repair guy opened it up to setup a network scanner. I wish I could locate that guy now, so I could open him up.) I closed up the hole and reconfigured the scanner, but the files the little dears left behind on the server will not stand to be deleted. Whenever I try, I get "cannot read from source file or disk". I have tried to remove them in a dozen different ways including explorer, a command window and an FTP client, all to no avail. These files are taking up five gigs of space on the main hard drive (C:\) and now a virus has embedded itself in the folders and refuses to go away (the owner has a thing for graceful and artistic pictures of the feminine form, and likes to doenload them to his PC.) Norton has kept the file from doing any damage thankfully. Any suggestions? Jeremy Tag: IIS 4.0 Security patches Tag: 317036
  - 17
    - Any tools/hints for tracking down secure/non-secure contents problem? Hi, We're running a secure (SSL) website on IIS on a Windows 2000 Advanced Server (SP4) system, and we're trying to track down a problem where we are occasionally getting a warning popup saying that "the page contains secure and non-secure items". We've checked all the "usual suspects", including searching all our html and ASP pages for absolute http: URLs and for IFRAME, but so far no luck. I've also been scanning the IIS logs, looking for any accesses to other than port 443, but found none. Is anyone aware of any other things that might cause this warning to pop up? Or, any ideas or tools that might help to figure out what's going on? We've been trying to track this problem down for awhile, and I thought that I'd try this NG... Thanks in advance, Jim Tag: IIS 4.0 Security patches Tag: 317034
  - 18
    - Can't authenticate using Proxy I have having some trouble getting users of my domain to authenticate through Microsoft Proxy Server 2.0. The website is on an Windows 2000 domain controller (IIS5.0) and has basic authentication enabled on it so users within the organisation don't have to provide their domain username and password. Users accessing externally through a routed/firewalled Internet connection are prompted for their username and password which works fine. However, when a user is accessing externally through MS Proxy they cannot authenticate. They are repeatedly prompted for authentication three times until they get an error page. The strange thing is that users who are adminstrators can get without a problem even through the proxy. I have tried giving the users logon locally rights but this still doesn't help. Anyone have any ideas? I really don't want to give all the users domain admins rights for obvious reasons. Regards Poch Tag: IIS 4.0 Security patches Tag: 317032
  - 19
    - website on IIS 6.0 not respond Hi, I just migrated 13 websites from IIS 5.0 to IIS 6.0 few weeks ago. Everything works fine on IIS 5.0 but when I migrated to IIS 6.0, I have a problem with one of my websites when the connections to this website go above 100 concurrent connection and it would stay there until I have to reset IIS 6.0 (I'm using Performance in Windows 2003 to monitor the connection of each website), most of the time when the connections reach this level it would stop responding while another webistes on the same server still responding properly. I need to restart IIS 6.0 using iisreset command before it is coming back. After I am using this iisreset, the connections to the website that has problem would drop down dramatically and it stay there for 19-28 hours before this problem happens again then I have to use iisreset again. Does anyone have any idea about this problem? Thanks. John Tag: IIS 4.0 Security patches Tag: 317010
  - 20
    - VBScript compilation error How can I overcome this error? Where should I add 'End'? ---------------------------------------- Error Type: Microsoft VBScript compilation (0x800A03F6) Expected 'End' /maicsa/functions/fnc-default.asp, line 49 Else ----------------------------------------- <%@ LANGUAGE="VBSCRIPT" %>  <% Sub validateInfo() dtExpiryDate = "Users Expiry Date" dtCurrentDate = Date strSQL = "SELECT * FROM userTable WHERE userName = '" & strName & "' AND password = '" & strPassword & "'" SET rsUser = OpenRecord(myCon, strSQL) If Not isObject(rsUser) Then Response.Write " Err : " & Err.description & " : " & Err.number & "<br>" Response.End End If Dim strNum Dim strFirstDigit Dim strSecDigit Dim YourVariable Dim strMsg strNum = "" YourVariable = "7012123" strSecDigit = Left(YourVariable,2) strFirstDigit = Left(strSecDigit,1) If strFirstDigit = "0" Then strNum = "0" ElseIf strFirstDigit = "6" Then strNum = "6" Else strNum = strSecDigit End If Select Case strNum case "0","6","10","70" strMsg = "Add 180 Days" ' SQL = "Update userTable Set [Date] = #" & DateAdd("d", 180, rsUser("Date")) & "# Where userName = '" & strName & "'" case Else strMsg = "Add 90 Days" ' SQL = "Update userTable Set [Date] = #" & DateAdd("d", 90, rsUser("Date")) & "# Where userName = '" & strName & "'" End Select response.write(strMsg) Call ExecCommand(myCon, SQL) Response.Redirect "../interactive/main.asp" Else Response.Redirect "../interactive_notregistered.asp" end if Else Response.Redirect "../interactive_loginfail.asp" End If End Sub Dim myCon, rsUser, strSQL SET myCon = OpenConn() dim strName, strPassword, strType strName = request.form("pUserName") strPassword = request.form("pPassword") Call validateInfo() SET myCon = nothing %> *** Sent via Developersdex http://www.developersdex.com *** Don't just participate in USENET...get rewarded for it! Tag: IIS 4.0 Security patches Tag: 317006
  - 21
    - DefaultAppPool automatically disabled - Event ID: 1011, 1002, 1009 W3SVC I awoke to the below events in the system log...and IIS not serving sites properly. Does anyone have a clue as to why this happened? Any advice is appreciated. Event Type: Error Event Source: W3SVC Event Category: None Event ID: 1002 Date: 12/16/2003 Time: 9:07:50 AM User: N/A Computer: SV01 Description: Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool. ================================== Event Type: Warning Event Source: W3SVC Event Category: None Event ID: 1011 Date: 12/16/2003 Time: 9:07:50 AM User: N/A Computer: SV01 Description: A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '3292'. The data field contains the error number. ================================== Event Type: Warning Event Source: W3SVC Event Category: None Event ID: 1009 Date: 12/16/2003 Time: 9:06:02 AM User: N/A Computer: SV01 Description: A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '364'. The process exit code was '0x800703e9'. ================================== Event Type: Warning Event Source: W3SVC Event Category: None Event ID: 1009 Date: 12/16/2003 Time: 9:05:30 AM User: N/A Computer: SV01 Description: A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '880'. The process exit code was '0x800703e9'. ================================== Event Type: Warning Event Source: W3SVC Event Category: None Event ID: 1011 Date: 12/16/2003 Time: 9:04:11 AM User: N/A Computer: SV01 Description: A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '1176'. The data field contains the error number. ================================== Tag: IIS 4.0 Security patches Tag: 317004
  - 22
    - XSL files accessed anonymously! Hi, has anyone noticed that if you're outputting XML from an ASP/ASPX/CGI page and it is linked to an XSL file, that the IIS process itself retrieves the XSL file, ignoring the currently authenticated user (i.e. it does it anonymously). I'd prefer to lockdown my XSL files, but it looks like the only way to do this is to limit access by IP address (local IP of IIS). Any other ideas? Soon'ish Craig Tag: IIS 4.0 Security patches Tag: 317000
  - 23
    - IIS won't serve dynamic content I have a Win2k Pro box set up so I can use it as a test server before making my ASP pages live on our host. Just to clarify this: The server will server static content, such as HTML pages. Yesterday, I start working on a new page, and if I request an ASP page, the browser will just sit there, not doing anything. I've tried everything from restarting IIS to tweaking all sorts of settings that seem to be related to the problem, but it still occurrs. Also, sometimes when I try to restart IIS (from Action->Restart IIS...), it will either: 1. Complain that the "service did not respond to the start or control request in a timely fashion" 2. A program named iisrstas.exe (I think...) will crash, and IIS will complain that "object released references prematurely" I'm at my wits end... -- -Mike Tag: IIS 4.0 Security patches Tag: 316996
  - 24
    - Monitor when a user logs on to FTP Is there anyway with IIS to monitor when a user logs on to a machine running IIS FTP? What I would really like is to get an e-mail when a user logs on, if any files were uploaded or downloaded, ect. Pretty much the same thing the log files do, but sends me an e-mail each time a user logs on. Any help would be great.... Thanks Eric Tag: IIS 4.0 Security patches Tag: 316995
  - 25
    - IIS blew-up, getting lost trying to correct I use Cold Fusion and 3 days ago I couldn't reach my localhost (127.0.0.1). I've maxed out my troubleshooting skills. I went to admin tools > component services and restarted CFMX (Cold Fusion MX). That didn't work. I restarted IIS. That didn't work. I restarted my laptop. (Win2000) That didn't work. Restarted it again. Checked to see if my asp pages were working (no) Started apache to check php. Yep, that worked. So, like what now? There's a ton of errors in my log file. I don't know which is significant. When I try to go to my PWS I get the following message: "Error Connecting to [name of box]. The system cannot find the path specified." Under the HELP there is the following Internet Information Services If you have IIS installed, you can view the product documentation by typing http://localhost/iisHelp/ in your browser address bar and pressing ENTER. I get a "page cannot be displayed error." As I said earlier, I've maxed out my troubleshooting ability. Now what? Gilbert Midonnet Tag: IIS 4.0 Security patches Tag: 316992

Folks,

After updating IIS 4.0 security patches on an NT 4.0 sp6 server running Exchange 5.5 and, of course, IIS 4.0., I am noticing some problems I cannot find answers to.

1) I can no longer open web pages that offer to install software, or some to open a new window. If I go to this link http://webodisy.caregroup.org/ I cannot install ANY of the shortcuts on the left. I get a cannot access webmainframe.caregroup.com. Is there another file extension that I should add to the accepted list?
2) My OWA stopped working, but I belive I resolved it by adding .asp to the "accepted" list on URLSCAN (still testing)
3) One domain's email will not leave my IMS queue. I cannot even telnet to the domain's mailserver any longer... All other email works as it should.

I have checked every log I can thing of to no avail..... Any assistance will be gretaly appreciated!

Thanks,

Ed

Top

Re: IIS 4.0 Security patches by jcochran

jcochran
Thu Dec 18 09:50:22 CST 2003

On Wed, 17 Dec 2003 16:36:08 -0800, "Ed B"
<anonymous@discussions.microsoft.com> wrote:

>Folks,
>
>After updating IIS 4.0 security patches on an NT 4.0 sp6 server running Exchange 5.5 and, of course, IIS 4.0., I am noticing some problems I cannot find answers to.
>
>1) I can no longer open web pages that offer to install software, or some to open a new window. If I go to this link http://webodisy.caregroup.org/ I cannot install ANY of the shortcuts on the left. I get a cannot access webmainframe.caregroup.com. Is there another file extension that I should add to the accepted list?

None of that is IIS related, that's an IE issue. Try an IE group.

>2) My OWA stopped working, but I belive I resolved it by adding .asp to the "accepted" list on URLSCAN (still testing)

If you use ASP, the extension has to be allowed in URLScan. You
either use the Allow or Deny section, there's not an "accepted list"
section.

>3) One domain's email will not leave my IMS queue. I cannot even telnet to the domain's mailserver any longer... All other email works as it should.

Ummm... If the domain's mail server isn't available, then mail won't
go there. Most often this is a DNS issue, and if it's a single domain
it may be that the destination is broken and not you.

Jeff

Top