RE: Locking down IIS

From: Brendon Crawford (xapocalypse@yahoo.com)
Date: 12/28/01 

Date: Thu, 27 Dec 2001 22:40:43 -0800 (PST)
From: Brendon Crawford <xapocalypse@yahoo.com>
To: rclark@texascellular.com, 'Srecko Jovancevic' <xxx-x@amadeus.uni-bk.ac.yu>, 'James Kelty' <jamesk@ashlandagency.com>, security-basics@securityfocus.com

the best way to secure a IIS machine is:
start > control panel > services > IIS > properties >
disable

:)

--- Robert Clark <rclark@texascellular.com> wrote:
> Beg pardon? No way to do that? What planet are you
> living on?
>
> > -----Original Message-----
> > From: Srecko Jovancevic
> [mailto:xxx-x@amadeus.uni-bk.ac.yu]
> > Sent: Friday, December 21, 2001 2:39 AM
> > To: James Kelty; security-basics@securityfocus.com
> > Subject: Re: Locking down IIS
> >
> >
> > there is no way to do that and there are no books
> to teech
> > you how but
> >
> > You can use the IIS lockdown tool ver 2.01 with
> Urlscan ,you
> > can download it from microsoft.com
> >
> > and always download the new patches for IIS and
> win2k from
> > micorsoft.com unless you are a programer so you
> can write
> > your own patches
> >
> > ----- Original Message -----
> > From: "James Kelty" <jamesk@ashlandagency.com>
> > To: <security-basics@securityfocus.com>
> > Sent: Thursday, December 20, 2001 6:10 PM
> > Subject: Locking down IIS
> >
> >
> > > Hello!
> > >
> > > I was wondering if someone could point me in the
> right direction to
> > > books, and or web sites that will lay out the
> best way to
> > lock down,
> > > bastionize,
> > a
> > > win2k/IIS 5.0 server. Thanks!
> > >
> > > -James
> > >
> > >
> > >
> >
> >
> >
>
>

=====
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCM$/GCS$/GIT$/ d--(++$) s: a--- c++@ UL+++ P++ L++ E---- W+++ N !o K- w(++++$) O-$ M V? PS-- PE++ Y+ PGP(++) t(+) 5 X+ R-- tv-- b+ DI(+) D++ G e h! r% y?
------END GEEK CODE BLOCK------
http://www.geekcode.com

__________________________________________________
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

Relevant Pages

  • Re: INETINFO.EXE
    ... As far as I am aware I do not have IIS installed nor do i run my home system ... not use my system as a server any way. ... > process if you are running Windows XP Professional and have IIS ... > direct download should not be trusted, the vendors sites are the safest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: File download from IIS is very slow
    ... Have you verified via some other mechanism the actual download speed ... series of network connections of variety of speeds between the server and ... of all the network connections between them and the ... IIS can definitely download and upload as fast as possible -- see ...
    (microsoft.public.inetserver.misc)
  • Re: Cantt download "exe" file because of IIS version
    ... with IIS and can completely alter IIS behavior in arbitrary manners, ... cut out the EXE download and just standardize the installation using your ... As far as I can tell, we are only running Tomcat as an ISAPI application. ...
    (microsoft.public.inetserver.iis)
  • Re: Connection reset by peer errors
    ... knowledgeable with iis specifically. ... the behavior when trying to download a file is that the download ... do need FTP running. ... connection reset by peer" errors. ...
    (microsoft.public.windows.server.general)
  • Re: Cantt download "exe" file because of IIS version
    ... The default MIME Type in IIS for .exe is application/octet-stream. ... When I looked at the download type it was still set to the MIME type that I just removed. ...
    (microsoft.public.inetserver.iis)