Security Basics mailing list archives

RE: URL Scan - allowing asp scripts


From: "Maher Odeh" <rax () netvision net il>
Date: Tue, 10 Jun 2003 09:44:26 +0200

hey Vic

that's true ... if you only installed URLScan via the IISLOCKD wizard , URLScan doesnt do that


-----Original Message-----
From: Vic Parat (NSS) [mailto:vic.parat () nssecurity com]
Sent: Monday, June 09, 2003 7:04 PM
To: Maher Odeh; MOHESOWA BYAS; security-basics () securityfocus com
Subject: Re: URL Scan - allowing asp scripts


You also have to redirect the .asp extension from 404.dll back to asp.dll.

Vic Parat, Sr. Security Architect
Network Systems Security, LLC
www.nssecurity.com


----- Original Message ----- 
From: "Maher Odeh" <rax () netvision net il>
To: "MOHESOWA BYAS" <byasmohesowa () sbm intnet mu>;
<security-basics () securityfocus com>
Sent: Sunday, June 08, 2003 2:32 AM
Subject: RE: URL Scan - allowing asp scripts


edit c:\winnt\system32\inetsrv\urlscan\urlscan.ini and ; the lines that
starts with .asp



-----Original Message-----
From: MOHESOWA BYAS [mailto:byasmohesowa () sbm intnet mu]
Sent: Wednesday, June 04, 2003 2:49 PM
To: security-basics () securityfocus com
Subject: URL Scan - allowing asp scripts



URL Scan by default denies all asp scripts; how do we reconfigure URL scan
to allow asp scripts?

Thanks
###########################################

This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange.
For more information, connect to http://www.F-Secure.com/

---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: