IIS Server Security - denyurlsequences

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2004 > denyurlsequences





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author denyurlsequences
rrwillu

2004-12-03, 6:10 pm

Hi

I have IIS 6.0 and URLscan 2.5. In IIS 6.0 there is no need to include
characters we need to block under 'denyurlsequences'. this is frustrating
because I can't remove/add to this list. In IIS 6.0 where does the
application store denyurlsequences list so i can modify?

I want to remove + from 'denyurlsequences' list, but I can't. HOw can
unblock/remove + character?

Thanks in advance.

Ken Schaefer

2004-12-06, 8:47 pm

Why can't you just edit the urlscan.ini file? URLScan doesn't work any
differently under IIS6 than it did under IIS5.

How to configure the URLScan Tool
http://support.microsoft.com/defaul...%5BLN%5D;326444

After editing urlscan.ini you may need to restart something (not sure
whether you need to restart IIS, or restart http.sys)

Cheers
Ken


"rrwillu" <rrwillu@discussions.microsoft.com> wrote in message
news:4969D0D0-8547-41A9-974F-6160B6E3755A@microsoft.com...
> Hi
>
> I have IIS 6.0 and URLscan 2.5. In IIS 6.0 there is no need to include
> characters we need to block under 'denyurlsequences'. this is frustrating
> because I can't remove/add to this list. In IIS 6.0 where does the
> application store denyurlsequences list so i can modify?
>
> I want to remove + from 'denyurlsequences' list, but I can't. HOw can
> unblock/remove + character?
>
> Thanks in advance.
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com