IIS Security - Week 4, 2007

SMTP Relay Problem

Help Needed - 27 Jan 2007 4:37 PM - 6 messages

Hi, I am getting error while using SMTP Relay, the error is 550 5.7.1 Unable to relay for prasad***@gmail.com. We have Windows 2003 OS used to host our web site (a small business site developed in asp.net). We are using 'SMTP Virtual Server' and 'POP3 Service' ...

access from internet/intranet

R.Demandt - 27 Jan 2007 12:54 PM - 5 messages

I have a wesite running that can be access both from internet or intranet. There are two directory's in the website, now I want to limited acces to one of the directory's to people in my intranet. How can I do this? ...

deny access to folders but dont want logon prompt

Spechty - 26 Jan 2007 7:46 PM - 2 messages

I am setting up an intranet site. I am using Frontpage and have the page published to an internal server. On the hard disk I have set NTFS permissions to the folders where I have certain pages and info. When denied users access the link to the folder the ...

IUSR_ and IWAM_ with admin privileges

Nicee - 26 Jan 2007 5:12 PM - 3 messages

An application has been purchased that requires the IUSR_ and IWAM_ accounts be placed in the local administrators group in order for the application to work. Could you please detail the security risks? ...

Windows 2003 server and web sharing

John - 26 Jan 2007 4:47 AM - 2 messages

I have a few questions about web sharing. 1. When you enable web sharing of a folder, what port does the user need to access the shared folder remotely? 2. If I set the security up in IIS for that folder, will it change the local ...

How secure is Digest Mode compared to Integrated Authentication

K12-Jammer - 25 Jan 2007 8:26 PM - 6 messages

While researching authentication on IIS I saw there were 3 options for authenication: Basic, Digest and Integrated Authentication. My requirements are that this works both on the Intranet and Internet. I would also prefer that the user enter only his short username and password ...

Custom 401, basic authentication, ISAPI problem

javawzl - 25 Jan 2007 4:41 AM - 2 messages

We have a custom ISAPI for authentication and authorization running on 2003 server. Basic Authentication is setup. A custom 401 has been setup on the site. When we attempt to access the site we are prompted for username/password. If we choose to CANCEL at this point the 401 is shown up ...

Stop spam mails SMTP Server

Help Needed - 24 Jan 2007 12:07 PM - 2 messages

Hi, I hosted our web site in windows 2003 (a small business web site developed in asp.net). I installed SMTP Virutal Server and POP3 Component of Win 2003 OS and configured with some mail boxes. Everything is working but my queue ...

URLscan 2.5 does not scan for CGI parameters

cilmberg - 24 Jan 2007 11:03 AM - 7 messages

Hi, I have IIS 6 on windows 2003sp1 with urlscan 2.5 running a cgi application. I want to have certain characters to be removed from the whole url including cgi parameters. Unfortunately the urlscan only checks till the '?' parameter which says that the cgi parameters are following. ...

Cannot get Cert authentication with directory service mapping to work

C Low - 24 Jan 2007 4:47 AM - 3 messages

Hi I've setup an IIS 6 server (on Win2K3 server) to do 2-way SSL using cert-based authentication with smart cards. On the IIS web site, I have these settings: * Anonymous access - disabled * Integrated Windows authentication -- enabled * Require client certs - enabled ...

About .NET and Server too Busy Error

io.com - 23 Jan 2007 4:42 PM - 3 messages

Hi, i have a web application make in .NET 1.1 SP1 and sometime the customers telle me that this error occurred : <body bgcolor="white"> <span><H1>Server Error in '/MyApp' Application.<hr width=100% ...

Integrated Windows Authentication

Richard C - 23 Jan 2007 11:28 AM - 3 messages

Hi, I have configured a website within IIS6 on Windows Server 2003 but am having issues with IIS Integrated Windows Authentication. Each time I try and access a test page in the root of the website I am being prompted for the username, password and domain. After 3 ...

Kerberos security on Windows 2003 using Sharepoing 2007

Nobody - 21 Jan 2007 2:40 AM - 2 messages

Hello, I spend last few days trying to setup excel services to connect to SQL Server Analysis Services on different machine using Kerberos without any luck, so I would really appreaciate any help I could get here. Few questions I have are: ...