IIS Lockdown/URLScan - no .exe's

From: S. Quillen (scott.quillen_at_state.de.us-exception)
Date: 07/29/03


Date: Mon, 28 Jul 2003 16:39:19 -0700


Update - fixed my .asp problems by re-creating my site
(that need them) as Front Page Webs. Still having the
problem with .exe's tho, if anyone has a helpful idea.

Thanks,

Sq

>-----Original Message-----
>Here's my problem - I'm running IIS 5 on a W2K server
>(SP3) to serve an intranet site (inside the DMZ).
>
>On Friday (yes, yes, never do anything on Friday) I
>downloaded teh IIS Lockdown/URLScan tools and set them
>loose on the server. Either I didn't read the Docs very
>well, or didn't configure things correctly, as my server
>started having probelms immediately thereafter.
>Specifically, the server would not allow any .asp,
>or .exe files. I have found the exception that was
>preventing those (in URLSCAN.ini), and a as a temporary
>fix, I have just removed the urlscan.dll from the list
of
>ISAPI filters in the master site configuration.
>
>This allowed my to serve .asp pages (Some anyway), but I
>am still unable to use any page which calls an .exe
(from
>the cgi-in folder). Where else is this being
>restricted? Execute permissions seem to be set
correctly
>in IIS, (scripts and executables), and the permissions
on
>the cgi-bin folder on the site in question are correct.
>
>When I try to access an .exe, I get this page:
>---------------
>An internal error has occured on the server.
>
>Please contact an administrator.
>----------------
>
>Any ideas what else is stopping me here? I also have a
>few .asp sites that are not working (Error 500)... I
>have rolled back the IIS Lockdown settings (and have
even
>removed the app), but am still unable to get my .exe's
to
>run.
>
>Thanks much in advance for any suggestions, etc.
>
>Scottq
>.
>



Relevant Pages

  • IIS Lockdown/URLScan - no .exes
    ... downloaded teh IIS Lockdown/URLScan tools and set them ... loose on the server. ... or .exe files. ... This allowed my to serve .asp pages, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Technical Delphi Question (but not about coding)
    ... > Windows 2003 Server allow users to rename a running EXE. ... > loading/reloading of resources from the original EXE cause problems? ...
    (borland.public.delphi.non-technical)
  • Re: Simple COM EXE Server question [More queries]
    ... and created my Exe Com server as MTA and then tried to call my exe from ..NET using multiple threads at same time. ... that registers the class factory for the object has entered STA or MTA. ...
    (microsoft.public.vc.atl)
  • Re: New/Old Windows virus? Help required please.
    ... Synflood attack from this server - the server was flooding the entire ... Only when we killed this exe did it stop. ... Current A/V is Symantec 10d and it was fully up to date. ... Oh - the only other thing was that the server had not windows updated ...
    (microsoft.public.security.virus)
  • Re: Remote application lunch and terminate (IIS server)
    ... If the program you are trying to launch is not a real CGI application, ... What you want to do is possible, but really has NOTHING to do with IIS. ... then invoke a command on the server. ... depends on how the EXE is written. ...
    (microsoft.public.inetserver.iis)