Re: urlscan and Frontpage

From: Pat (htech_at_hotmail.com)
Date: 01/31/04 

Date: Sat, 31 Jan 2004 13:57:32 -0500

happens when my customers try and publish. I spoke with the MS IIS
group this morning and made some changes, but still no luck. I am
going to speak with the FP group on monday(they are open M-f 9-5). I
have been going thru the google groups and there seem to quite a few
people having issues with FP and URLscan. in terms of security, how
secure is running FP on a IIS server anyhow? seems you need to open
too much up to have it run?

On Sat, 31 Jan 2004 08:58:56 +0100, "David Martin"
<David.Martin@skill-it.com> wrote:

>Could these (Options may be FrontPage) be OWA rather than frontpage ? Seacr
>KB for URLSCAN and OWA.
>
>(OWA uses more verbs than these)
>
>Dave.
>
>"Pat" <htech@hotmail.com> wrote in message
>news:01rl10pb18vjm1rb3ki4qdkp2ds1r6c6sf@4ax.com...
>> Have W2K, IIS5 Frontpage ext,
>> installed lockdown wizard and URLscan, now FP Clients can not publish
>>
>> modified Urlscan.ini according to setup for frontpage doc.
>>
>> getting following when user tries to publish, also does FP need Webdav
>> to work?
>>
>> Sent verb 'PROPFIND', which is not specifically allowed. Request will
>> be rejected.
>> Sent verb 'PROPFIND', which is not specifically allowed. Request will
>> be rejected.
>> Sent verb 'OPTIONS', which is not specifically allowed. Request will
>> be rejected.
>> Sent verb 'PROPFIND', which is not specifically allowed. Request will
>> be rejected.
>> Sentt verb 'PROPFIND', which is not specifically allowed. Request will
>> be rejected.
>> Sent verb 'OPTIONS',
>>
>>
>

Relevant Pages

  • urlscan and Frontpage
    ... Have W2K, IIS5 Frontpage ext, ... Sent verb 'PROPFIND', ... Request will ...
    (microsoft.public.inetserver.iis.security)
  • Re: urlscan and Frontpage
    ... >installed lockdown wizard and URLscan, now FP Clients can not publish ... > Sent verb 'PROPFIND', ... Request will ...
    (microsoft.public.inetserver.iis.security)
  • Re: WebInspect
    ... On IIS PROPFIND will only be of use if 1) Directory listings are enabled and ... If you request the directory with a GET request - e.g. ... But the catch here is that directory listings are disabled by ... You can always try the SEARCH request method on IIS. ...
    (Pen-Test)
  • Re: Request Delete after IIS Lockdown
    ... Edit urlscan.ini, enabled the delete verb if you need it. ... I need to do delete requests with IIS 5.0, but after patch my server with IIS Lockdown i can't. ... And for me in general, how work a delete request, which method, which files or process IIS use to do this. ...
    (microsoft.public.inetserver.iis.security)
  • URL Scan and Unknown Sessions - Repost
    ... About a week ago I started to see a sudden jump in the URLScan logs ... Request ... Sent verb 'SEARCH', ... that they're coming in pairs - and that each one is creating a session on ...
    (microsoft.public.inetserver.iis.security)