Re: URLScan INI file updates

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 05/06/03

  • Next message: sharky: "Re: cloaking the web server signature"
    Date: Mon, 5 May 2003 19:39:12 -0700
    
    

    URLScan reads configuration only once -- when it is loaded by IIS.

    Prior to IIS6, IIS loads ISAPI Filters on start of the W3SVC Service. So,
    the only way to get URLScan to re-read configuration is to restart the W3SVC
    Service (i.e. recycle IIS).

    On IIS6, ISAPI Filters are loaded on-demand per worker process startup (you
    can treat IIS5 Compat Mode as IIS6 where only one worker process starts up
    with the name of inetinfo.exe). This means that you can cause URLScan to
    re-read configuration by recycling each Application Pool (in IIS6 Worker
    Process Isolation Mode) or restarting IIS (in IIS5 Compatibility Mode).

    -- 
    //David
    This posting is provided "AS IS" with no warranties, and confers no rights.
    //
    "Microsoft NNTP" <Ziad_Saval@M8.com> wrote in message
    news:Oy77LQ1EDHA.2204@TK2MSFTNGP10.phx.gbl...
    Is there a way for me to tell the URLScan ISAPI filter to refresh it's
    settings after I update the urlscan.ini file without restarting IIS?
    

  • Next message: sharky: "Re: cloaking the web server signature"

    Relevant Pages

    • Re: Trend C/S/M SMB on SBS2003
      ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
      (microsoft.public.inetserver.iis)
    • Re: Trend C/S/M SMB on SBS2003
      ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
      (microsoft.public.windows.server.sbs)
    • Re: Lockdown tool for .Net server
      ... URLScan is not necessary for IIS6. ... > your IIS6 webserver when you install Windows Server 2003. ... > tells me that IIS is not running or I neeed to have version 4.0 or 5.0. ...
      (microsoft.public.inetserver.iis.security)
    • Re: How do I remove the server header in IIS6?
      ... You can use the UrlScan doesn't ship with IIS 6, ... server header is not one of the things that IIS 6 does out-of-the-box (since ... > URLScan is not in IIS6. ...
      (microsoft.public.inetserver.iis.security)
    • Re: ISAPI Filter:How to hide/modify the response header
      ... there must be ways of making ur IIS WebServer totally ... >URLScan will do this for you and a lot more. ... >whatever other ISAPI filters you wish. ... >If your web server is visible, that means TCP 80 is open ...
      (microsoft.public.inetserver.iis.security)