Re: IIS Lockdown

From: Andy (api@selfnet.com)
Date: 05/19/02 

From: "Andy" <api@selfnet.com>
Date: Sat, 18 May 2002 16:11:34 -0700

I am havinf similar problem with FP SEARCH forms. After
installing IIS Lockdown (w/FP option) and URLscan, it
killed FP counters and search forms. Counters are fixed by
allowing *.exe extensions in URLscan. We are still "locked
down" for the search forms - ANY IDEAS?

>-----Original Message-----
>I'm sure someone specifically knows the answer to this,
but in general you
>can look at the urlscan.log file that is usually in
>windowsroot\system32\inetsrv\urlscan\ and see what
exactly is being blocked,
>then edit the urlscan.ini file to loosen that up. I
believe there was an
>option in the install process to choose Frontpage
compatibility, I assume
>you chose that. If not, URLscan comes with a bunch of
sample urlscan.ini
>files in the install folder, you could edit those and see
if anything
>strikes you as being different from your urlscan.ini
file. PS you'll
>probably want to continue to check the urlscan.log file
from time to time to
>see what's being blocked and make sure nothing legitimate
is accidentally
>being blocked.
>
>"Rick Kerr" <spearhead467@hotmail.com> wrote in message
>news:3d1101c1fd4a$fdbf3b60
$2ae2c90a@hosting.microsoft.com...
>> I want to run IIS Lockdown before exposing IIS5 server
to
>> public. When I do, members of the domain to which the
>> webserver belongs can no longer use Frontpage to work on
>> their (sub) webs. What must I change in default
lockdown
>> (for static webserver)?
>
>
>.
>

Relevant Pages

  • Re: IIS 6 and banners
    ... DO NOT INSTALL IIS LOCKDOWN. ... Use the instructions on the URLScan ...
    (microsoft.public.inetserver.iis.security)
  • Re: URLScan and IIS6
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ... and the upgrade/clean install to IIS6. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Lockdown
    ... My recommendation for this and every other URLscan problem is the same. ... URLscan is blocking it, test the application and then check the urlscan.log. ... >>files in the install folder, you could edit those and see ... >>> I want to run IIS Lockdown before exposing IIS5 server ...
    (microsoft.public.inetserver.iis.security)
  • Re: ASP.NET 2.0 maximum URL length?
    ... explicitly installed on my IIS7/Vista system? ... URLScan - an add-on tool I have not installed. ... It's a recommended install for IIS 4.0 and 5.0, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SUS, IIS Lockdown and Terminal Server
    ... This has been discussed in the SUS newsgroup ... Server Requirements and Recommendations for Installing Microsoft Software ... If you are going to install SUS on an existing server, ... Better integration with IIS lockdown tool ...
    (microsoft.public.win2000.security)