IIS Server Security - urlscan interpretation?

Author

urlscan interpretation?

Vic

2006-01-09, 7:51 am

IIS 5 - lockdown and urlscan installed on Windows 2000 server. New firewall
put in place, webserver is on dmz and webserver is fully patched.

I rec'd this in my urlscan log - can anyone interpret this for me? I've
googled and read what I could find on this but am not sure if I should be
alarmed or if this is relatively normal.

"Received a malformed request which resulted in error 50 while modifying the
'Server' header. Request will be rejected with a 400 response."

Thanks in advance!

Wade A. Hilmo [MS]

2006-01-09, 6:00 pm

Hi Vic,

There are a few usenet threads on this. The one below has a pretty
comprehensive description of what causes this message:

http://groups.google.com/group/micr...r /> 738ff2561a

I hope that this helps,
-Wade Hilmo,
-Microsoft

"Vic" <Vic@discussions.microsoft.com> wrote in message
news:0762BC32-97F4-4B83-96A7-CF7B5310F579@microsoft.com...
> IIS 5 - lockdown and urlscan installed on Windows 2000 server. New
firewall
> put in place, webserver is on dmz and webserver is fully patched.
>
> I rec'd this in my urlscan log - can anyone interpret this for me? I've
> googled and read what I could find on this but am not sure if I should be
> alarmed or if this is relatively normal.
>
> "Received a malformed request which resulted in error 50 while modifying
the
> 'Server' header. Request will be rejected with a 400 response."
>
> Thanks in advance!