RE: URL Scan - allowing asp scripts

• Previous message: Anders Reed Mohn: "Re: Hotmail sign-in through Outlook Express -- clear-text?"
• Maybe in reply to: MOHESOWA BYAS: "URL Scan - allowing asp scripts"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Tue, 10 Jun 2003 09:44:26 +0200
To: "Vic Parat (NSS)" <vic.parat@nssecurity.com>, "MOHESOWA BYAS" <byasmohesowa@sbm.intnet.mu>, <security-basics@securityfocus.com>

hey Vic

that's true ... if you only installed URLScan via the IISLOCKD wizard , URLScan doesnt do that

-----Original Message-----
From: Vic Parat (NSS) [mailto:vic.parat@nssecurity.com]
Sent: Monday, June 09, 2003 7:04 PM
To: Maher Odeh; MOHESOWA BYAS; security-basics@securityfocus.com
Subject: Re: URL Scan - allowing asp scripts

You also have to redirect the .asp extension from 404.dll back to asp.dll.

Vic Parat, Sr. Security Architect
Network Systems Security, LLC
www.nssecurity.com

----- Original Message -----
From: "Maher Odeh" <rax@netvision.net.il>
To: "MOHESOWA BYAS" <byasmohesowa@sbm.intnet.mu>;
<security-basics@securityfocus.com>
Sent: Sunday, June 08, 2003 2:32 AM
Subject: RE: URL Scan - allowing asp scripts

edit c:\winnt\system32\inetsrv\urlscan\urlscan.ini and ; the lines that
starts with .asp

-----Original Message-----
From: MOHESOWA BYAS [mailto:byasmohesowa@sbm.intnet.mu]
Sent: Wednesday, June 04, 2003 2:49 PM
To: security-basics@securityfocus.com
Subject: URL Scan - allowing asp scripts

URL Scan by default denies all asp scripts; how do we reconfigure URL scan
to allow asp scripts?

Thanks
###########################################

This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange.
For more information, connect to http://www.F-Secure.com/

---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

• Previous message: Anders Reed Mohn: "Re: Hotmail sign-in through Outlook Express -- clear-text?"
• Maybe in reply to: MOHESOWA BYAS: "URL Scan - allowing asp scripts"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]