|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
URLScan not blocking/logging anything (W2k3, IIS6)Hi,
I have installed URLScan on my W2k3 web server, and it appears to be loaded correctly (green up-arrow in the ISAPI filters tab), but it is not functioning at all. It is not blocking the extensions it should block, nor is it generating a log file. Any ideas why this would happen? I have un/reinstalled it without any effect. My next step is to uninstall IIS, but would rather not have to do that if I can avoid it. Thanks. How do you know that is functioning ? you request a .exe and it serves?
And of coz, do you really need urlscan with IIS6 ? refer http://www.microsoft.com/technet/security/tools/urlscan.mspx#EDAA -- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "Scott" <mcgilliv***@gmail.com> wrote in message news:1121974902.545694.49040@o13g2000cwo.googlegroups.com... > Hi, > > I have installed URLScan on my W2k3 web server, and it appears to be > loaded correctly (green up-arrow in the ISAPI filters tab), but it is > not functioning at all. It is not blocking the extensions it should > block, nor is it generating a log file. Any ideas why this would > happen? I have un/reinstalled it without any effect. My next step is > to uninstall IIS, but would rather not have to do that if I can avoid > it. > > Thanks. > FAQ: You should fully read the following URL before attempting to run
URLScan on IIS6; it should answer all your questions. http://www.microsoft.com/technet/security/tools/urlscan.mspx -- //David IIS http://blogs.msdn.com/David.Wang This posting is provided "AS IS" with no warranties, and confers no rights. // "Scott" <mcgilliv***@gmail.com> wrote in message I have installed URLScan on my W2k3 web server, and it appears to benews:1121974902.545694.49040@o13g2000cwo.googlegroups.com... Hi, loaded correctly (green up-arrow in the ISAPI filters tab), but it is not functioning at all. It is not blocking the extensions it should block, nor is it generating a log file. Any ideas why this would happen? I have un/reinstalled it without any effect. My next step is to uninstall IIS, but would rather not have to do that if I can avoid it. Thanks.
Writing to a Virtual Directory
IIS6.0 prompting for logon Authentication is not wanted. Integrated Authenticatoin - Default to the main domain Basic auth without dialog - no database secure ftp Why is login requesting domain for some users? certificates and sub-webs of Default Web Site 401.1 - Integrated Security Error when using VB application WSUS and IIS Lockdown tool configuration |
|||||||||||||||||||||||