FTP attacks

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - IIS Virtual Directories Based on User Name? I am attempting to convert an Apache server to IIS, feature-by-feature. The last thing I have to do is convert the Apache Virtual Hosting by name (a user has their website within their home directory and apache figures it out according to parts of the domain name). http://user-one.domain.com/ = /home/user-one/public_html/ http://another-1.domain.com/ = /home/another-1/public_html/ http://www.domain.com/ = /home/www/public_html/ This is enabled with the mod_vhost_alias module outlined at http://httpd.apache.org/docs/2.0/vhosts/mass.html#simple How can I do that in IIS? Or in a .NET 2.0 HTTPModule? I don't want to just redirect. Thanks. Tag: FTP attacks Tag: 384547
  - 2
    - www.domain.com works domain.com does not Hello, We are having a problem with our website. When on the inside of our firewall www.domain.com takes users to our site, but domain.com takes them to a default IIS under construction message. Outside of our firewall the www.domain.com works just fine, but domain.com can't be found. Thanks, Matt Tag: FTP attacks Tag: 384539
  - 3
    - Problem with IIS 6.0, Coldfusion MX 7.0.1 and Perl Hi, I have somewhat of a wierd problem that I am unable to figure out. We are running a coldfusion application server which serves files with the extension ".cfm" We are also using a custom built perl program which does authentication on some of our pages and read/writes a cookie. Following is an example of a URL that would redirect the user to the perl script login screen, authenticate and send the user back to the requested page specified in the URL https://127.0.0.1/cgi/bluestem/lb_login.pl/cf/Redirect.cfm?RedirectPath=/cf/index.cfm This URL will redirect the user to the path /cf/index.cfm after the authentication by the perl program. My problem is that the above URL used to work fine with Coldfusion 6.1 and IIS 5.0 and it also worked fine with Coldfusion 7.0.1 and IIS 5.0 but when I try doing this with IIS 6.0, it throws a missing template error. I did some investigation and found out that it is reading the "redirect.cfm" in the URL and instead of going to the perl script, it is trying to find that cfm page which is not there on that path. If I try using this URL with an htm file, like for example: https://127.0.0.1/cgi/bluestem/lb_login.pl/cf/Redirect.htm?RedirectPath=/cf/index.cfm or even https://127.0.0.1/cgi/bluestem/lb_login.pl/cf/ things work fine. The only problem seems to be when the .pl and the .cfm extensions are in the URL and then it doesnt work. Any ideas? Tag: FTP attacks Tag: 384536
  - 4
    - HTTP 401 error on Web Service call, anonymous allowed I am at a loss as to why I am unable to make a web service call. I am getting a 401 return code even though anonymous access has been enabled. I even tried running aspnet_regiis -i, but that didn't seem to help either. Anyone have any suggestions? Tag: FTP attacks Tag: 384535
  - 5
    - Getting Error when opening/Running the Web Projects from Visual St We are getting the following error while opening web projects from Visula Studio, its complaing some prolem with IIS Metabase... We tried Uninstall --- IIS,.NET,and even tried with uninstall and install the Service Pack but nothing is working out .... any solution? the OS is XP Professional The Error............... ==================================================== Event Type: Warning Event Source: W3SVC Event Category: None Event ID: 36 Date: 6/26/2006 Time: 3:32:32 PM User: N/A Computer: TestMachine Description: The server failed to load application '/LM/W3SVC'. The error was 'The specified metadata was not found. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ===================================================== Thanks in advance. Tag: FTP attacks Tag: 384534
  - 6
    - IIS 6 modifying DLL or Script Map Help I've been stuck on this issue for the past week now and it's really driving me crazy. I need to know how to programmatically add/delete extensions in web directory when I create the web. What I mean is that if you open the IIS manager, then right click on the default web site, go down to properties and open that up. Then click on the home directory tab, and then hit the configuration button. There is a list of extensions there that I need to manipulate when I make the web site. I've found tons of examples and code, but I don't know which one to use. Also I'm doing this all in vbscript. If you could provide me a sample, or show me to a little code snippit or something I would be VERY relieved. Thanks a ton in advance. Tag: FTP attacks Tag: 384531
  - 7
    - Website I recently have been creating a website from scratch. What do you all think of www.ineedfilm.com? Tag: FTP attacks Tag: 384526
  - 8
    - IIS 6.0 & UNC Can anyone point me to the right place to find out how to use my asp apps with UNC paths. I am having a problem with the apps starting. Here are a few errors I receive when browsing from IIS admin.. Any help is greatly appreciated.. Server Error in '/Authentication' Application. -------------------------------------------------------------------------------- Parser Error Description: An error occurred during the parsing of a resource required to service this request. Please review the following specific parse error details and modify your source file appropriately. Parser Error Message: Could not load type 'Authentication.Global'. Source Error: Line 1: <%@ Application Codebehind="Global.asax.vb" Inherits="Authentication.Global" %> Source File: \\server\webapps\authentication\global.asax Line: 1 -------------------------------------------------------------------------------- Version Information: Microsoft .NET Framework Version:1.1.4322.2300; ASP.NET Version:1.1.4322.2300 AND Server Error in '/AffiliateFundedGrants' Application. -------------------------------------------------------------------------------- Configuration Error Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately. Parser Error Message: Required permissions cannot be acquired. Source Error: Line 256: <add assembly="System.EnterpriseServices, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3b"/> Line 257: <add assembly="System.Web.Mobile, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3b"/> Line 258: <add assembly="*"/> Line 259: </assemblies> Line 260: Source File: c:\windows\microsoft.net\framework\v1.1.4322\Config\machine.config Line: 258 -------------------------------------------------------------------------------- Version Information: Microsoft .NET Framework Version:1.1.4322.2300; ASP.NET Version:1.1.4322.2300 Tag: FTP attacks Tag: 384524
  - 9
    - DLLHost hangs Hi, We recently upgraded from DLLs written in Delphi 5 (written to be implemented in MTS) to DLLs written in Delphi 2005 (als MTS). Almost no code-change in the DLL's. The DLL's belong to a COM+ - application. On our test-server (W2K Server) everything runs fine. On our acceptation-server (also W2K), DLLHost hangs when using the newer DLL's. When requesting a webpage which uses one of the DLLs (using server.createobject), IE never returns (so no error-message or timeout or anything giving a clue what is (not) happening). The same behaviour occurs when using an almost empty DLL (just implemented the OnActivate method). The OnActivate method should write a little file to disc (access-rights are ok, because it runs fine on the test-server and hangs on the acceptation-server). The roles etc on the test-server are the same as on the acceptation-server, so are all other settings (as far as I can see). No lines are added to the IIS-log (except for the GET) nor to the event-log. Does anybody know how to debug the problem? Does IIS or COM+ have a way to log more information? Thanks in advance, Dethmer Kupers Tag: FTP attacks Tag: 384519
  - 10
    - IIS ODBC logiing Hi. I have NLB three-node IIS cluster under Windows 2003 + SP1. I specify ODBC logging to remote SQL database (SQL 2000 EE). Now we try analyze data and see strange records Very simple query to DB: select top 100 * from dbo.IIS_WebLog order by processingtime desc In the log table I see parameter [processingTime] is like 5182235 or 4881485 milliseconds!!! It's > 1.26 hour! From IE I don't see SUCH delays. What's happend? Can somebody describe it? Thanks. Tag: FTP attacks Tag: 384518
  - 11
    - DLLHOST up to 100% caused by response.write? DLLHOST in my IIS 5 server recently often is up to 80, 90% processor. My server handles thousands of request of this kind: ------------------------------------------------------------- host = request.servervariables("http_host") select HTMLColumn from <table> where host = 'host.mysite.com' output = rs("HTMLColumn") response.write(output) ' It can be also 150 Kb + of size ------------------------------------------------------------- Recently we have had great increase of page views so I think the problem should be in way IIS handles too many response.write(output) this way. What do you think about? Should it be better something like this: .. output = rs("HTMLNameOfFile") server.execute(output) ? Any help appreciated. Regards. -- fabri MKDS: Joker® - <waiting for ds lite...> AC:Fabrizio, Kanoemi, 1890 4700 1546 Tetris DS: 748422 559210 Tag: FTP attacks Tag: 384516
  - 12
    - IIS ASP page displayed blank I am running Windows Server 2003 and IIS 6. Whenever any user trys to connect to open any asp page in any virtual directory a blank page is displayed. There are no error messages. Also there are no error messages on the server in any event log. Any help would be appreciated. Evan Nielsen IT Manager Tradewinds Aviation Tag: FTP attacks Tag: 384515
  - 13
    - KB917344 has broken JavaScript ASP Since installing the security update http://www.microsoft.com/downloads/details.aspx?familyid=16DD21A1-C4EE-4ECA-8B80-7BD1DFEFB4F8&displaylang=en on our Windows 2000 server (SP4) all ASP pages which utilise Javascript have stopped working with the following error Active Server Pages error 'ASP 0129' Unknown scripting language /whateverfile.asp, line 2 The scripting language 'JavaScript' is not found on the server. Any ideas why, and how to fix it please? Tag: FTP attacks Tag: 384514
  - 14
    - IIS 6.0 and randomly timeout Hi! I have got IIS 6.0 on Windows 2003 Server. I have installed HTTP handler (as simple reverse-proxy) - code below. I created virtual category with this dll and Wilcard application mapping set to aspnet_isapi.dll Now everything works fine, but sometimes IIS stops working and return 'Error in /catalog Application. Request timeout...' And than i must restart IIS (at least application pools). Thanks for help, Filip Code of Handler.cs: /* Handler.cs; v 1.1; 2005/10/25; Filip Balicki Script capture all references to selected in Web.config virtual directory, and download resources from selected (also in Web.config) remote host. (so it is work as proxy) */ using System; using System.Web; using System.Net; using System.Text; using System.Text.RegularExpressions; using System.IO; using System.Collections; using System.Configuration; namespace Polygon { public class Handler : IHttpHandler { string host_address { get //Take local address (where this script is installed) from web.config //http://my_domain/virtual_catalog/ { return ParseUrl(ConfigurationSettings.AppSettings["local_address"]); } } string dest_adress { get //Take local address (where this script is installed) from web.config //http://my_domain/virtual_catalog/ { return ParseUrl(ConfigurationSettings.AppSettings["destination_host"]); } } public void ProcessRequest(HttpContext context) { string my_uri = context.Request.Url.ToString(); //construct real uri to remote host string real_uri = Regex.Replace (my_uri, host_address,dest_adress,RegexOptions.Multiline | RegexOptions.IgnoreCase); HttpWebRequest request = (HttpWebRequest) WebRequest.Create(real_uri); request.KeepAlive = false; request.AllowAutoRedirect = false; HttpWebResponse response; try { response = (HttpWebResponse) request.GetResponse(); } catch(System.Net.WebException we) { context.Response.StatusCode = 404; context.Response.StatusDescription = "Not Found ("+we.Message+")"; response = (HttpWebResponse) we.Response; writeBody(context, response); return; } if (response.StatusCode != HttpStatusCode.OK) //Found not OK header - probably redirect { context.Response.AddHeader("Location", response.Headers["Location"]); context.Response.AddHeader("Content-Type", response.ContentType); context.Response.StatusCode = (int) response.StatusCode; } else { context.Response.AddHeader("Content-Type", response.ContentType); writeBody (context, response); } response.Close(); context.Response.End(); } public bool IsReusable { get { return true; } } public string ParseUrl (string url) { if ((char)url[url.Length-1]!= '/') { url+='/'; } return url; } public void writeBody (HttpContext context, HttpWebResponse response) { Stream receiveStream = response.GetResponseStream(); if ((response.ContentType.ToLower().IndexOf("html")>=0) ||(response.ContentType.ToLower().IndexOf("javascript")>=0)) //if we get html or javascript use ASCI mode { string body; StreamReader readStream = new StreamReader (receiveStream, Encoding.Default); body = readStream.ReadToEnd(); context.Response.Write(body); } else { //the response is not HTML - use binary mode byte[] buff = new byte[1024]; int bytes = 0; while( ( bytes = receiveStream.Read( buff, 0, 1024 ) ) > 0 ) { //Write the stream directly to the client context.Response.OutputStream.Write (buff, 0, bytes ); } } response.Close(); } } } Tag: FTP attacks Tag: 384511
  - 15
    - How to automatically delete messages from the Badmail folder? Hi, we are running IIS5. In case of bulk mails (50k mails) the lot of mails written to mailroot\Badmail and it cause to problem in sending process. We would like to delete incoming badmails something like BadMailAdmin.exe in case of Exchange http://support.microsoft.com/kb/867642/en-us Is it possible to cancel or to limits the writing into Badmail? Thanks Yogev Tag: FTP attacks Tag: 384507
  - 16
    - IIS 5 Web Server Point to Virtual Directory On IIS 6 I have kind of a strange situation here. Our public website is running on a IIS 5 server. We have several ASP search pages on this website. I am slowly, as time permits, re-writting these in ASP.NET and placing them on our new web server which is running IIS 6. On the website (on the IIS 5 server) I need to create a link that points to the IIS 6 server. I have created a Virtual Directory and tried pointing it to the shared folder, but all this does is bring back the HTML portion of the page, it doesn't seem to run the application. Also I have tried setting the virtual directory to redirect to this other web server, but this doesn't seem to work either. It seems like the problem is that the IIS 5 box being my "Publicly Accessible" server, it doesn't know that the IIS 6 box exists. Does anyone have any ideas on how to get around this issue? The obvious would be to go ahead and move the web server to the IIS 6 box but I really don't want to do that. I wanted to migrate the site as I rewrote it in ASP.NET. Any help would be greatly appreciated. Mark Tag: FTP attacks Tag: 384499
  - 17
    - Web Service throws 401 error when friendly server name is used. Hi there, We just migrated our Windows2000/IIS5 web servers to brand new Windows2003/IIS6 servers; all web applications work like a charm except the ones that call web services. The web services are published on the same server and the security is exactly the same as the old server, with the exception of the ASPNET account replaced for the NETWORK SERVICE account... The problem is, the applications that call the web service throw Error 401 (Unauthorized) if the URL used to access the webservice uses the friendly name of the server... If we change that URL for the actual machine name, the web service works as expected... So, http://friendlyname/webservices/myservice.asmx doesn't work... and http://machinename/webservices/myservice.asmx works! Why is this? Any clues? Thanks in advance! - Allan R. Tag: FTP attacks Tag: 384494
  - 18
    - SSL problems We seem to have run into a problem with our SSL scheme. We have multiple web sites (www.site1.com, www.site2.com, www.site3.com) and need to run SSL pages on each site (for credit card purposes). The problem is you can't set up multiple sites in IIS with the same SSL port, it seems. What we did was create a port for each site (https://www.site1.com:4433, https://www.site2.com:4434, https://www.site3.com:4435 ) and this seemed to work. We just found out that if you have an ISA Proxy server, you will get a 502 error. We are having connection issuse using secure connection if we hit a site with an ISA Proxy server. Not sure if other proxies would have this problem. I had a friend at Microsoft try to access our secure pages and he got a 502 error. I had another friend try it and he got the same error. Both had an ISA Proxy server. When my other friend went around the Proxy server, it worked fine. I got the following from googling: *************************************************************************************************************************** "Error 502 returned by a HTTP proxy (Proxy Error (The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests.))." This is caused by the default behavior of Microsoft ISA server, which only allows requests to ports 443 and 563 using its HTTP Connect method. (Primary use of HTTP Connect is to allow SSL connections to HTTPS servers). The Microsoft Knowledge Base article Q283284 addresses this issue. To access FTP sites through ISA server's HTTP proxy, access to all ports must be allowed. FTP's control connection port is 21 by default, but data connections can use virtually any port, because it is assigned by the FTP server. (Although allowing port 21 and ports >1024 should be enough, there might be exceptions.) To allow connections to all ports through the HTTP proxy, following VB script must be run on the ISA server: set isa=CreateObject("FPC.Root") set arraypolicy=isa.Arrays.GetContainingArray.ArrayPolicy set tprange=arraypolicy.WebProxy.TunnelPortRanges set tmp=tprange.AddRange("FTP", 1, 65535) tprange.Save *************************************************************************************************************************** We are also using SiteUpTime.com to test our pages, periodically. Everything was fine until Sunday. Since then it can't see the pages. I assume something changed on their end but can't be sure until we hear back from them. The problem is we need to solve the issue if this is going a problem with some of our clients or potential clients. The only other way we can see to solve this problem would be to put a different server in for each web site. This would be pretty expensive and would like to get around that if possible. I don't think we can ask our potential clients to change their Proxy Servers to allow our pages in. Any other ways around this? Thanks, Tom Tag: FTP attacks Tag: 384491
  - 19
    - IIS 6.0 "service" missing IIS 6.0, no SP - HELP PLEASE! All websites are in stopped mode and "World Wide Web Service" is missing from the Control Panel. This is the second time this has happened, after the first (last week) we reinstalled IIS and App Center. Now it is broken again. Does anyone have a clue what the root cause is? Thank you for the help and/or workaround. Tag: FTP attacks Tag: 384489
  - 20
    - IIS6 - SQL2000 cluster - RPC issues Everyone, We have a Windows 2003 IIS 6 deployment of (3) servers load balanced via a Cisco Content Switch 11503 which we also use the SSL module on the CSS to take this load off the servers as well. We have a DMZ defined for our WWW servers as well as a DMZ defined for our SQL servers as well. Each of these are separate interfaces off our PIX. The question is handling RPC calls between the www servers and the SQL servers. As I understand by default RPC allocates between ports 1024-5000 and our network engineering staff does not like having that many ports open between the (2) segments of the network. So, we have RPC calls initiating both ways (from www to sql and from sql to www) and they want the best way to secure this and limit the ports. I have read numerous MS articles on registry hacks, allocating ports but I cannot run across anything that everyone is comfortable with. Does anyone have any best practices or ideas they have come up with? I have read the article on configuring RPC to use certain ports and how to help sercure those ports via IPSec and feel this could be deployed. Has anyone deployed RPC via HTTP? Thanks for any help on this. -WE Tag: FTP attacks Tag: 384486
  - 21
    - Server 2003 X64 + ASP.NET+ .NET 2.0 = no go? Hi, I have a new development server that i put together on a Windows 2003 64 bit machine. I also have SQL Server 2005 and Developers Studio 2005 and 2003 installed on this machine. I have executed the "Enable32bitAppOnWin64 1" command, as per the instructions when installing Developers Studio. I am unable to server ASPX pages from this machine. I started with a "500 - Internal Server Error" but am now getting a "%1 is not a valid Win32 application. " Under Application Configuration, ASPX is pointed to C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll. I have tried Googling this but haven't found anything. Any suggestions? Thanks! Tag: FTP attacks Tag: 384485
  - 22
    - IIS on Win2003 and ASP .Net 2.0 We have a production server (Win2k SP1) running both .Net 2.0 and 1.1 Apps. There are 3 application pools on the server. When we add a new Virtual Directory and change the ASP .Net version to 2.0 in the default app pool, the applications in the other application pools are restarted. This is similar to the report found at http://msdn.microsoft.com/newsgroups/default.aspx?dg=microsoft.public.inetserver.iis&mid=7cec03e3-9b28-409b-869d-ba4ab61cc261&sloc=en-us But in our case, we didn't have to restart IIS although all our applications in other applications pools got restarted. Couldn't find a solution to the problem in that thread. So wondering if anyone found a workaround for this? Thanks, --Tom Tag: FTP attacks Tag: 384483
  - 23
    - IIS Authentication Non-Trusted Domain Does anyone know of a way to allow / force IIS6 on a Windows 2003 box to authenticate users against an Active Directory system that resided in a different and non-trusted domain? Thanks John Tag: FTP attacks Tag: 384481
  - 24
    - Intranet publishing security Hi all, I have a folder for the company Intranet on the a Windows 2003 server. A certain group of users have full access to this folder to perform updates. They are then supposed to be able to publish this to another folder on the server, this is where users access the Intranet. Users with Admin rights can publish no problems at all. Users with no Admin rights cannot publish to the directory even if I add them into the security list and grant full rights. Where should I set rights for this? In IIS version 6? or using the NTFS perms? Any help would be very much appreciated. Thanks. Tag: FTP attacks Tag: 384474
  - 25
    - Get Virtual IIS URL Hi I'm trying to get the URL of every IIS Virtual Servers on my Windows 2003 Server. And I want to do that in C#. Does someone has an idea ? many thx C=E9dric Tag: FTP attacks Tag: 384469
- Next
  - 1
    - IIS redirects guru needed First off, I would like to create a redirect so that a request to www.homepage.com/people/staff/smith.html gets redirected to www.homepage.com/people/staff/smith.cfm How can I do this in IIS? Secondary, I would like to do this for 20 staff members. what is the easiest way to do this? Thanks!! Keith Tag: FTP attacks Tag: 384468
  - 2
    - Hosting Web Service in IIS Hi all, I have hosted a .NET web service in IIS. This web service will get piounded by datd from clients. I have a typical user scenario where a user is sending data(50kb xml) at every 50 msec for 10 sec continously. This web service is not able to receieve all the data from the client. some of the data are missing. I read in article that IIS5.1 on win xp supports only 10 simultaneous client connection. Can some one help me with this problem. Is my problem due to limitation of IIS5.1 Regards Hari Tag: FTP attacks Tag: 384465
  - 3
    - IIS on XP Pro using Telenet.be Hi, I'm trying to set up a Video Surveillance system on an XP Pro machine connected to my motorola surfboard sb5101 cable modem through Telenet.be in Belgium. It can be set to use any port, but uses port 80 as default for it's web browser interface. However, I can't seem to get into it over the internet. I have therefore tried setting the same machine up with IIS to see whether THAT works, but it does not. When trying to load the page, by typing http://my.ip.addr/ or even http://my.ip.addr:80/ it does not find the server, nor can i telnet to the server on that port. I CAN use remote desktop to the same IP address. I have no firewall, or any other network switch/hub/router connected. So my question is whether some ISP's actually BLOCK the use of web servers or ports, and whether there is a port i can use instead, although I have tried several different ports and none seem to work. Or is there a firewall on the motorola surfboard or anywhere else on the Telenet service? Any help would be much appreciated. Tag: FTP attacks Tag: 384456
  - 4
    - WinXP IIS under heavy load Hi, I am stress-testing a file-transfer application on WinXP Pro IIS with a 1 Mbps connection. So far it seems that other connections start failing already when there is a single active transfer requests. The failures include timeouts, 403's and "Connection with the server was terminated abnormally". When the connection capacity is maxed, the failures are (obviously) very common. My application supports two types of requests: status requests and file transfer requests. Status requests are always less than 1 kB (including response). They are also quick to process. The status requests must not fail, at least not frequently. File transfer requests may fail, and will be retried periodically for several hours if needed. Is this kind of priorization possible with IIS? I think the bandwidth throttling options in Server OS's would work, but that would require knowledge of the available connection speed which may vary due to other services on other servers. Any other solutions? -- Mikko Noromaa (mikkon@excelsql.com) - SQL in Excel, check out ExcelSQL! - see http://www.excelsql.com - Tag: FTP attacks Tag: 384455
  - 5
    - Redirects Disappearing Hi all I have an .asp site (Win2003 Server, IIS6) that has three redirects ("a redirection to a URL"), opposed to "the Designated file". We have had an unknown process that has removed these redirects overnight. What kind of process could have caused it? Is this deemed a potential security hole so security tools remove them unless configured otherwise? Could IISLockdown be to blame? URLFilter? Tag: FTP attacks Tag: 384454
  - 6
    - IIS 5.1 & asp.net 2.0 Hi everyone, After a weekend of trying this I have honed in on a strange bug in IIS. I have asp.net 1.1 and 2.0 on my PC. I want to run asp.net 2.0 using IIS, all the .net 2.0 web apps work and run fine, however, .net 2.0 throws a 404 error. My IIS runs on a partition at e:\ I found that changing my default website to a folder like e:\dev, .net 2.0 works from there, but won't run from e:\. Can anyone help with this? Thank you Tag: FTP attacks Tag: 384452
  - 7
    - Media center and No IIS I just bought this box from Dell with Media Center 2002 version, But no IIS on the box. I installed Studio Standard 2005 and the SQL 2005 but the error was no IIS installed on the unit. I went to add/remove Prog's but IIS install or uninstall is not there, right about now I am not sure as what to do next. ANY IDEAS ON THIS anyone. Trey Durden Tag: FTP attacks Tag: 384447
  - 8
    - Interesting problem for GURUs on IIS 5 I recently noticed problems on a w2k server sp4 + IIS 5 + sql server 2000 sp4 box. The problem is that DLLHOST.exe is almost always on 70-80-90 % of processor. Doing a research I found that the problem should be this: I use this approach with host headers to make web pages "cached". - One website in IIS 5 (www.domain.com, it accept also *.domain.com) - One include file in default document for this site (index.asp) that does this work: - Look for current host if exists in a table of sql server previously created, for example "red-cars.domain.com" - if exists, first look this host in a cache table that has 2 columns: HOST (varchar) -- HTML (ntext) and do a SELECT in this table and produce HTML this way: response.write(OUTPUTHTML) : response.end() - if not exists, I use server.execute(somepage) to process the page and at the end, I re-call the page through a xmlhttp object and write output in cache table. Because of recent problems on parser ASP, found that I should encounter problem with server.execute in some cases...but I don't know if response.write(bigtext) should also cause probs. Till now I hadn't because we had few host to process...now we have 200.000+. Any help much appreciated. Best regards. -- fabri Tag: FTP attacks Tag: 384444
  - 9
    - IPP printing It would appear the boss wants to start using IPP. We've got printers set up across a few servers right now, but I'd prefer to have all these printers on the one IPP site. Is this possible? If so, any hints as to where I'd have to look to get information on setting this up? -- --------------------- Bastard Sheep http://bastardsheep.blogspot.com/ Tag: FTP attacks Tag: 384443
  - 10
    - Internet Guest Account, what does this do? Hi all, I've recently taken over a network and noticed that a number of folders on their server have an Internet Guest Account with full control. Could someone tell me what this account is, and if its needed or not? Help would be much appreciated. Regards Matt Tag: FTP attacks Tag: 384441
  - 11
    - How does IIS6 handle web pages without a doctype specified? I took over support of a web site whose pages do not have a doctype specified (I haven't had time to correct this situation yet). When the web site was moved from an older WIndows server to a Windows 2003 server running IIS6, we started having browser timeout problems, and user login problems for AOL users (the pages use session variables to track user login). Could these problems be related to how IIS6 handles web pages with no doctype specification? What are the differences between how IIS5 and IIS6 would handle this situation? Thanks. -- Peggy A. In A Chord Web Design and Consulting Tag: FTP attacks Tag: 384436
  - 12
    - Compressing Javascript include files? I've enabled compression on the IIS 6 web server as described in this article: http://weblogs.asp.net/owscott/archive/2004/01/12/57916.aspx We make extensive use of Infragistics NetAdvantage controls which make heavy use of include Javascript files like this: <script type="text/javascript" src="/Hops/Infragistics/Scripts/ig_shared.js" ></script> 1) Can "js" include files like this be compressed? 2) Do you have to include "js" extension in the HcScriptFileExtensions section in the metafile? 3) Is it moot anywhere as I thought I read somewhere that include files like this are downloaded once and then cached Thanks, Rob. Tag: FTP attacks Tag: 384432
  - 13
    - IIS Admin Services Hi Guys, I am having a problem starting up IIS. When I go to services.msc to start the service, this is what it says. Windows could not start the IIS Admin Service on Local Computer. For more information, review the System Event Log. If this is non-Microsoft services, contact the service vendor, and refer to service-specific error code -2145318902. Please help me out. I am not sure what to do? Ankit Shah Tag: FTP attacks Tag: 384428
  - 14
    - InetPub/wwwroot..... changing in Registry I did a search for a while to find this and couldn't. Here is the question I have. I have IIS running on an XP PC. I have three websites I want to be able to use with IIS. I can go the long route and change the properties of the Default Web Site everytime I want to edit a different website and display it through IIS, but I was looking for a .reg command I could run instead. I was thinking I could have three .reg files on my desktop and I sould run which ever one I wanted to change where the Default Web Site was pointing. I thought I had figured out where the path for the Default Web Site was but it didn't seem to work when I changed it. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InetStp] "PathWWWRoot"="C:Inetpub\wwwroot" I can successfully change the PathWWWRoot with a .reg file, but it doesn't do the trick. Does anyone know how to do this? I can't afford server 2003 in order to have the IIS Manager that can handle multiple sites, but I figure there is a way to do this. All I can think of is I am missing the location of the registry file that addresses this. Thanks in advance and I hope that makes sense. Mykk Tag: FTP attacks Tag: 384423
  - 15
    - IIS 5.1 XP prof SP2 installing ftp service Error ftpmib.dll not found Attempting to Install ftp service, for IIS 5.1 in XP professional I get the error, ftpmib.dll not found in the i386 servicepacks. Never mind that the file is there. I can not install the ftp service.... I did a search of this file and there is a file with that name in several places including the one indicated by the installer. But it is not recognized by the installer or probably an error / bug...??? I appreciate any help with this. David Tag: FTP attacks Tag: 384421
  - 16
    - Setting up an ASPX Site Hi, I have configured a new Website on IIS 6 on Windows Small Business Server 2003. ASP 2.0 is activated. Since Visual Studio 2005 wants FrontPage Extensions to be activated, I installed them. I always get the error 403 even when I try to access the site in the browser on the server with admin rights. The default page is default.aspx, which is in the list of default pages. As soon as I put a simple "index.htm" file in the root directory of the site, I can see the site even from the browser of my workstation in the LAN. Of course this is not a ASP site. I gues there is something wrong with the ASP 2.0 configuration. Which configuration issues need to be made here? Thanks for a hint. regards Patrick Tag: FTP attacks Tag: 384420
  - 17
    - About the virtual memory of W3WP hello, everyone ! Because it has been troubled, please help. Windows2003(64bit) + IIS6.0(32bit) + ASP + OO4O It is to watch virtual memory with Performance Moniter, but it does not decrease with the just virtual memory increases. Is this probably to be something which does not decrease? Or it probably means that memory has done leak? Just a little examination is not attached. Please teach the person who knows why is. Tag: FTP attacks Tag: 384419
  - 18
    - Error on asp pages i recently installed novell edirectory and zenworks on our iis server, and now when we run asp scripts we get the error code '800a0401' any idea, i know this is not a script error as the same appears on the asp authenication page for exchange 2003 web access -- _________________________ Adam Simmonds Systems Administrator Tag: FTP attacks Tag: 384418
  - 19
    - Problems with "Microsoft.XMLHTTP" and IWAM_MACHINENAME Hi there, I=B4m running an asp application on a windows 2000 Server for 3 months, nothing changed there until I put an page to get external images from sites and save it to my disc via Microsoft.XMLHTTP Request method on the application. Every time I run the page that executes the script with XMLHTTP my IIS hangs and doesn=B4t send a timeout page, so I have to do an iisreset and when it=B4s up again it=B4s impossible to execute asp pages (error 500 on browsers) and I got an error on log: DCOM got error <error description> and was unable to logon .\IWAM_MACHINENAME in order to run the server: {<component GUID>} The other message under it is: Error: "Overlapped I/O operation is in progress." So I have to use cscript.exe synciwam.vbs to synchronize IWAN_MACHINENAME and I have the Error: 80110414. So I restart the windows... and It=B4s working again! Why is that happening? Why only when I run XMLHTTP Requests? This application connects on a mySQL 5.0 on another machine for months with mySQL ODBC Driver, send e-mails via aspmail, write images to disc with aspimage... and now with a Microsoft object it stops working? Help me please! Alvaro Beckerig (From Rio de Janeiro - My english is horrible, I know!) Best regards! Tag: FTP attacks Tag: 384413
  - 20
    - IIS5 and Mysql CLOSE_WAIT ports Hi, I've noticed that my IIS5 server (Windows 2K AS,SP4) seems to be hogging TCP ports. Active Ports and Process Explorer show many ports (hundreds over time) in the CLOSE_WAIT state, associated to dllhost.exe I'm running a mysql server on the same machine, and I see they are connected to that (port 3306). I've tried modyfying the TcpTimedWaitDelay value to 60s, but no difference. Any ideas? Adrian Tag: FTP attacks Tag: 384409
  - 21
    - ionic isapi rewrite filter Hi I'm trying to use ionic with 2 conditional rules: RewriteCond %{HTTP_HOST} ^www.testtoys.ca$ RewriteRule /(.*).aspx$ /$1.aspx?iZoneUID=1 RewriteCond %{HTTP_HOST} ^www.test.ca$ RewriteRule /(.*).aspx$ /$1.aspx?iZoneUID=2 But the first rule seems to be the only one that's ever checked! If I reverse the order then ^www.test.ca$ gets checked, but whichever is second never evaluates. Am I misunderstanding how to use it? what I want is when someone goes to http://www.testtoys.ca/index.aspx it will translate to http://www.testtoys.ca/index.aspx?iZoneUID=1 but when http://www.test.ca/index.aspx then http://www.test.ca/index.aspx?iZoneUID=2 Tag: FTP attacks Tag: 384401
  - 22
    - Name Based Virtual Host problems under IIS v5 Hi, I have a problem with name based virtual hosts on Win2K / IIS v5 and I am trying to debug it. I need to know how to access my virtual hosts on a local network ? When I only had a single website I could just type in "http://myserver/" into the address bar in IE or Firefox but I do not know what is the required syntax to access each individual website ? I've tried http://myserver/www.mydomain1.com but just get "No website configured at this address". I cannot use the normal addressing syntax "http://www.mydomain1.com", "http://www.mydomain2.com" etc because the brain damaged Netgear router I've got intercepts the requests as being for its administration interface and there seems to be no way out of that :-( I am trying to determine whether I have a problem with my IIS setup for the Name Based Virtual Hosts or whether it is my 3rd party domain forwarding that is at fault and I want to proceed by accessing the websites through my local network hence the need for a server-based address syntax. Thanks for any advice, Mike Davies Tag: FTP attacks Tag: 384400
  - 23
    - Connection_Dropped, Connection_Abandoned_By_AppPool, and Timer_EntityBody errors my intranet webapp has been suffering seemingly-random crashes for a few weeks now. i've gone through a lot of debugging and reccommendations, and not a whole lot is helping. if anyone here is excellent at reading debugdiag reports, i would be much obliged. server is a single-processor w/ XPserver03; IIS6 serving asp.net1.1 Though the project initially ran in defaultappool, i've segmented the projects major elements into separate appools to find its' the main part of my project crashing. edits to the machine.config were made to optimize the processmodel as reccommended. during a crash, the w3wp.exe for the main appool shoots up to 100% cpu until the timout occurrs and it is recycled. the event does not seem to be related to current load, or even the execution of any individual webform on its' own. memory useage is consistent and doesn't baloon. after a hang, inside httperr.log i find errors such as: 2006-06-23 16:25:31 192.168.0.55 1391 192.168.0.17 80 HTTP/1.1 GET / - 853326 Connection_Dropped SAMmainAppool 2006-06-23 16:23:58 192.168.0.63 2246 192.168.0.17 80 HTTP/1.1 POST /frmXXX.aspx - 853326 Connection_Abandoned_By_AppPool SAMmainAppool and every once in a blue moon this one too: 2006-06-23 16:00:00 192.168.3.60 1440 192.168.0.17 80 HTTP/1.1 POST /frmXXX.aspx - 853326 Timer_EntityBody SAMmainAppool the event log displays entries for this problem sometimes, but not usually. when it does, it is as such: error at 6/21/2006 9:46:45 AM, User XXX: Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding. .Net SqlClient Data Provider at System.Data.SqlClient.SqlCommand.ExecuteReader I don't beleive this is accurate, because the sql database is still responsive; it's the w3wp.exe that's too caught up in its' own hanging to receive the db's response. I've run debugdiag several times under several circumstances, and its' about here that i reach my knowledge-limit; can someone help me find the unusualness in these debugdiag reports? i take the high fragmentation in the crpe32!EnableDialogsHelp heap and outstanding allocations in mscorwks.dll to be red flags, but i'm still lacking a smoking gun and resolution. If there's a better way to provide this or more information, just let me know. since this is a little too much to tack onto the post, i'll temporarily host and link the debugdiag reports for this message: recent crash w/ no leak analysis (asp.net release mode): http://vegeta-sama.dnsalias.org/iishang/IIS_Memory_Report__3.mht (0.5mb) recent crash w/ leak analysis (asp.net release mode): http://vegeta-sama.dnsalias.org/iishang/IIS_Memory_Report__2.mht (1.5mb) older crash w/ leak analysis (asp.net debug mode): http://vegeta-sama.dnsalias.org/iishang/IIS_Memory_Report__1.mht (2.1mb) any and all insight would be graciously received. -g Tag: FTP attacks Tag: 384398
  - 24
    - multihoming on one web *site* Hi we have a need to have two seperate web sites that differ only slightly. They are e-commerce sites with products for 2 different segments of people, so we want to multihome on the server so each segment can access through a unique dns name. For example, teachers go to www.teacherstore.com and parents go to www.parentstore.com We want to share the same code for both sites, and have the site decide which products to display depending on which site is being accessed. I have it set up now so that we have one underlying asp.net 2.0 project deployed on the server, with 2 web sites created and both pointing to the same underlying directory containing the asp.net project. It works, but is it safe? Are there any problems with doing this? Tag: FTP attacks Tag: 384394
  - 25
    - iis5/6 programatically configuraion need rewrite code from VB to Jscript. VB Code: -------- Dim MimeMapObj, aMimeMap, MMType, MMExtension, i, aMimeMapNew() Const ADS_PROPERTY_UPDATE = 2 'Get the mimemap object. Set MimeMapObj = GetObject("IIS://LocalHost/MimeMap") 'Get the mappings from the MimeMap property. aMimeMap = MimeMapObj.GetEx("MimeMap") ' Add a new mapping. i = UBound(aMimeMap) + 1 Redim Preserve aMimeMap(i) Set aMimeMap(i) = CreateObject("MimeMap") aMimeMap(i).Extension = ".TST" aMimeMap(i).MimeType = "TEST/test" MimeMapObj.PutEx ADS_PROPERTY_UPDATE, "MimeMap", aMimeMap MimeMapObj.SetInfo ----------- it's work fine. when rewriting to JS - have some problems: aMimeMap - is not JS Array - it is VBArray. so i cannot Add value to it. Cannot Redim it such is in VbScript I found Solution with Scripting.Dictionary - but it is not work. here code( i not ADD new Mime in this code, i'm only conver VBArray to Js Array and back ) it fail with Unknown Error. ----- function mime_map( ext, mime_type ) { var MimeMapObj = GetObject( "IIS://localhost/MimeMap" ); var aMimeMap = MimeMapObj.GetEx("MimeMap") var js_ar = aMimeMap.toArray(); var d = new ActiveXObject("Scripting.Dictionary"); for(var i=0; i<js_ar.length; i++){d.item(i) = js_ar[i]} var aMimeMap_n = new VBArray( d.items() ); MimeMapObj.PutEx ( 2, "MimeMap", aMimeMap_n ); // this line failed MimeMapObj.PutEx ( 2, "MimeMap", aMimeMap ); // this line work MimeMapObj.SetInfo(); } Tag: FTP attacks Tag: 384393

I have had many attempts to log into my server many of which are coming from
various ip addresses. Most of these seem to be from China. I want to block a
range of IP's via the server. Is there anyway to do this? The router will not
block the ip's.
Please help.

Top

Re: FTP attacks by Consultant

Consultant
Tue Jun 27 15:52:22 CDT 2006

yes under security of the ftp site, go to ip addresses, then allow all
except the ones you wish to block. this is found in the iis snap-in

"trapped" <trapped@discussions.microsoft.com> wrote in message
news:FBABCB89-EFA5-4998-A41C-FB85E9A040B9@microsoft.com...
>I have had many attempts to log into my server many of which are coming
>from
> various ip addresses. Most of these seem to be from China. I want to block
> a
> range of IP's via the server. Is there anyway to do this? The router will
> not
> block the ip's.
> Please help.

Top

Re: FTP attacks by trapped

trapped
Wed Jun 28 08:34:01 CDT 2006

Thank you

"Consultant" wrote:

> yes under security of the ftp site, go to ip addresses, then allow all
> except the ones you wish to block. this is found in the iis snap-in
>
> "trapped" <trapped@discussions.microsoft.com> wrote in message
> news:FBABCB89-EFA5-4998-A41C-FB85E9A040B9@microsoft.com...
> >I have had many attempts to log into my server many of which are coming
> >from
> > various ip addresses. Most of these seem to be from China. I want to block
> > a
> > range of IP's via the server. Is there anyway to do this? The router will
> > not
> > block the ip's.
> > Please help.
>
>
>

Top