Re: All Ports open on IIS Server?

From: donnie (donnie_at_queyosepa.net)
Date: 10/10/04 

Date: Sat, 09 Oct 2004 23:14:21 GMT

On Sat, 09 Oct 2004 14:23:24 GMT, Leythos <void@nowhere.org> wrote:

>In article <h6lem0hofq4lra121ism7lisj67jp1lgum@4ax.com>,
>donnie@queyosepa.net says...
>> On Fri, 08 Oct 2004 20:27:03 GMT, Leythos <void@nowhere.org> wrote:
>>
>> >You didn't tell us what type of firewall -
>> ##################
>> He also didn't tell us what version of IIS. IIRC it wasn't until
>> version 6 that security was worth anything.
>
>Donnie, you must not have any experience with IIS 4 or 5. We've had
>hundreds of public IIS servers running without a single compromise or
>problem that was security related.
>
>You can easily secure IIS 4 and IIS 5, and IIS 6.
>
>--
#####################
That's correct, I haven't used IIS. It was something that I read and I
understand that many vulnerabilities are due to mis-configuration.
donnie

Relevant Pages

  • Re: Mac Server Hacked In Less Than 6 Hours
    ... Windows has RAS, and for it is built in since NT 3.1 ... | A typical IIS box and this Mac are not the same thing so the comparison ... IIS has been subject to quite a few bugs and so have ... Security isn't a proprietary attribute. ...
    (sci.crypt)
  • Re: DCOM calls fails - access denied
    ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to secure IIS?
    ... XP as well, because even if you don't install IIS, there are still a number ... If you think Windows 98 is secure, ... easy to attack, if there's no firewall... ... IIS security checklists] 3) install firewall and antivirus, ...
    (microsoft.public.inetserver.iis.security)
  • RE: .pdf security using ASP.NET security...
    ... I am wondering if using the aspnet_isapi.dll to handle PDF files security ... IIS has a list of Application Mappings which dictate whether a particular ... entries that tell aspnet_isapi.dll what to do with various file types. ... Files that do have app mappings require all the same steps, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: impact of mapping .??? to ASP.NET ISAPI???
    ... security issue, either from ASP.NET or IIS (this is something that my ISP ... > entries that tell aspnet_isapi.dll what to do with various file types. ... > process the request. ...
    (microsoft.public.dotnet.framework.aspnet.security)
Quantcast