URLSCAN and W3SVC logs...
From: Reverend Brad (rev.despam.brad@rectaltronics.com)
Date: 09/05/02
- Next message: John Alderson: "Re: AD+ crash logs and .dmps Part II"
- Previous message: Rich Benack [MS]: "Re: Win2000 Adv Server Hacking"
- Next in thread: BB: "Re: URLSCAN and W3SVC logs..."
- Reply: BB: "Re: URLSCAN and W3SVC logs..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Reverend Brad <rev.despam.brad@rectaltronics.com> Date: Wed, 04 Sep 2002 19:40:22 -0400
I was hoping that URLSCAN would cut down on the "noise" in my web site
logs generated by Nimda et al, but I seem only to have three choices:
1. No URLSCAN, results in entries like:
2002-08-31 13:05:54 - - 66.92.113.71 80 GET
/scripts/..%2f../winnt/system32/cmd.exe /c+dir 404 - -
2. URLSCAN with UseFastPathReject=1, results in:
2002-09-04 00:03:29 adsl-156-143-4.owb.bellsouth.net - 66.92.113.75 80
GET /<Rejected-By-UrlScan> ~/scripts/root.exe 404 - -
3. URLSCAN with UseFastPathReject=0, results in:
2002-09-04 09:55:11 66.95.141.180 - 66.92.113.74 80 - - - 404 - -
Is there any way to have URLSCAN prevent IIS5 (Win2K advanced server)
from logging ANYTHING at all when it successfully filters a URL??
Thanks,
Brad
- Next message: John Alderson: "Re: AD+ crash logs and .dmps Part II"
- Previous message: Rich Benack [MS]: "Re: Win2000 Adv Server Hacking"
- Next in thread: BB: "Re: URLSCAN and W3SVC logs..."
- Reply: BB: "Re: URLSCAN and W3SVC logs..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
