IIS Security - Week 21, 2006

IIS HTTPS + Windows XP

abcd - 26 May 2006 10:14 PM - 4 messages

I want to enable secured communicaiton (HTTPS) for my web site. I am using Windows XP professional SP2 as my development box. In my Web applications settings in directory Security Tab the secured communcaiton setting is disabled...whereas the same setting is enabled on my other machine Windows ...

ASP error script and trojan

Eco - 26 May 2006 4:02 PM - 4 messages

Our web server is found that is hacked occassionally. The server will have the following issues. 1. webpage directory will be added some *.htm file, part of file contents are shown as follows. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" ...

HOW TO IIS -Security

phil - 25 May 2006 4:44 AM - 11 messages

Hi!! & Hello!!! Well I have a server where I have hosted many sites on IIS 6.0. When the users I mean the public users (anyone from anywhere) if they go to their Start->Run-> from windows and type the IP address(for eg ...

Security in SMTP Virtual Server

aboni - 24 May 2006 8:47 PM - 7 messages

Hi! I'm using a POP3 service and SMTP Service of Windows 2003 server to setup a small Mail Server Enviroment. In my "Default SMTP Virtual Server" -> Properties -> Access -> Authentication I need to allow "Anonymous Acces". If I don't do that, people ...

HTTP Error 403.6 - Forbidden: IP address of the client has been re

Richard Young - 24 May 2006 8:12 PM - 4 messages

Hello, I have a client running Windows 2003 Small Business Server. They have installed an app that runs under the default web site. When I am on the server or on the LAN and type in the URL: https://servername/bigtime ...

HELP --- FTP IIS

segis bata - 24 May 2006 8:10 PM - 2 messages

Hello, I have a question for you all; I'm new in IIS's FTP and this is driving me crazy. I created a user in Windows, that user should have (full) access to two folders in the FTP root; what I need to do is create the permission to ...

How can digitally signed executable be "secure" ?

Polaris - 24 May 2006 7:55 PM - 4 messages

Hi Experts: I know the purpose of signing an executable (say, by VeriSign) is to make it more securer. But can anyone explain why ? If I use my private key to sign an executable, I guess the content of the ...

Application Pool domain credentials

Steve Smith - 24 May 2006 4:01 PM - 5 messages

I am building a web page that will invoke a server-side process that needs to query Active Directory. I have set up a non-privileged account and have configured an application pool for the virtual directory to use this account on the identity tab. ...

Secure Communication

Eng.Rana - 24 May 2006 2:30 PM - 2 messages

hi all, i was wondering how can i secure a communication between a web server (IIS6.0) communicating or exchangeing data with a SQL Server at the backend?? thanx ...

Unable to get anonymous access working

M van Iren - 24 May 2006 1:54 PM - 2 messages

The development of a site is near completion and until now the site is accessed trough integrated windows authentication with SSL The site has to go public and therefore the IUSR_computername is enabled. Also the permissions on the virtual site and its contence for the IUSR ...

WMV and IIS

Andrea :) - 24 May 2006 10:28 AM - 2 messages

Hello i've some WebServer (windows 2000 and windows 2003). I've a question about file Avi and Wmv : when a client call a link with a wmv file (es. [link]) IIS start a streaming. ...

integrated authentication

Frédéric de Thysebaert - 24 May 2006 6:41 AM - 6 messages

Hi, I have a intranet asp application runing on IIS6. with data on SQL server runing on an other computer (the two servers are member server of our active directory domain). Access to the data are based on the user account who ...

Wildcard Domain Restriction

wynne.tom - 22 May 2006 11:20 PM - 4 messages

Is it possible to add a wildcard for a domain name restriction? For example, I want to restrict only users from a certain domain to access the site but they may be coming from many subdomains. Such as www1.mysite.com, www2.mysite.com, www3.mysite.com, etc. ...

Certificate Authority guidance requested

Steve B. - 22 May 2006 10:31 PM - 3 messages

I need to purchase and install a security certificate from one of the Certificate Authorities. Does anyone have recommendations re specific CAs that are good to work with (or not)? What do you believe are the most important criteria for evaluating a CA? Thanks in advance for any assistance. ...

No access after requiring SSL

Richter1033 - 22 May 2006 8:11 PM - 5 messages

After I enabled SSL in IIS on my exchange 2003 server, I get no access to the site what so ever. I'm running a CA locally on my server.(it's a stand-alone, not part of the enterprise CA) If I remove the SSL requirement it works. Any ...

securing multiple websites using wildcard certificate - one IIS 6.0 server

nix - 22 May 2006 4:54 PM - 4 messages

My setup is as below - Windows Server 2003 SP1 3 websites running in IIS 6.0 a.domain.com b.domain.com c.domain.com internal IP 1.1.1.1 external ip 2.2.2.2 1-to-1 nat of 2.2.2.2 to 1.1.1.1 by firewall ...

IIS Virtual Directory Hacks

jonathan haughey - 22 May 2006 11:02 AM - 2 messages

I am publishing a web application in asp that will allow my users to access a sql database, each user will have a virtual directory that will give them an interface to access their respective database. My worry is that they will be able to access each others virtual directories ...

One Domain with 2 websites and 2 SSL Certs

Word problems - 22 May 2006 1:25 AM - 6 messages

Greetings All, I am running a Win2003 SBS Standard server. I have 2 websites running on the server in the same domain. I have added a second IP to the server and assigned each website an IP address. I have also created separate SSL certs ...

handling files on another server within same workgroyp !!??

Rafi - 21 May 2006 3:15 PM - 3 messages

hi, i have a web application running under win2003 with IIS6. there are ASP pages that access and modify local files located in c:\folder1\folder2\*.* every thing works fine. I would like to move the files to another server on the same workgroup ...