Hostname given to XP clients
From: Colcord, Aaron (AColcord@rwbaird.com)
Date: 02/27/03
- Previous message: Marc Fossi: "Re: DMZ boxes in the domain - Bad moderator"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Colcord, Aaron" <AColcord@rwbaird.com> To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com> Date: Thu, 27 Feb 2003 14:57:57 -0600
Here is the situation. We have 3-6 webservers behind a loadbalancer.(behind
a firewall too) A Site is set up with Windows Authentication only. It
appears on Internet Explorer running on Windows XP when credentials are
requested that the hostname of the server is sent. It appears in the upper
left part of the authentication box saying 'connection to
<servername>.<domain>'. Now the actual dialog box says 'Connecting to
<host>.<domain>'. So if the name of the server was web19 and the site being
hosted was 'mytestsite.somedomain.com'. What happens is you would see a box
(in XP only) where the upper left say 'connection to web19.somedomain.com'
and the middle portion of the dialog box would say 'connecting to
mytestsite.somedomain.com'. Older clients like Nt4 and 2000 will only give
the 'connecting to mytestsite.somedomain.com'
We don't want the servername given out and would rather have the
authentication box say in the upper left 'connecting to
mytestsite.somedomain.com'. How do we turn this off? or prevent the
servername being given out.
Aaron Colcord
Web/Database Administrator, MCSE, MCDBA
R.W. Baird & Co.
**********************************************************************
Robert W. Baird & Co. is required by regulation to review and store
both outgoing and incoming electronic correspondence. Baird
may be required to produce-mail records for the SEC or other regulators in a criminal investigation. E-mail transmission cannot
be guaranteed to be secure, timely or error-free. Baird therefore
recommends that you do not send confidential information to us via
electronic mail, including account numbers, social security
numbers or any personal identification numbers. This is not an
offer, or solicitation of an offer to buy or sell any security
investment or other product. Any information regarding specific
investment products is subject to change without notice. Any review,
forwarding, dissemination or other use of, or taking of any action in
reliance upon this information by persons or entities other than the
intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer
on which it exists.
- Previous message: Marc Fossi: "Re: DMZ boxes in the domain - Bad moderator"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
