IIS Server Security - IIS6 HTTPS POST not being returned to .ASP file...

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > June 2006 > IIS6 HTTPS POST not being returned to .ASP file...





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS6 HTTPS POST not being returned to .ASP file...
Sean

2006-06-28, 1:26 pm

Using IIS6 on 2003 SP1. What I am doing is submitting a credit card approval
request to an HTTPS (ssl) site. The response is being redirected to an .ASP
file - which is set up to accept the fields being returned. Problem is I
never get anything returned to the file. I have illiminated the firewall
through Cisco's help. The problem is definitely at the server and I believe
it is security related. If I use the HTTPS (ssl) site without redirecting
the response to any file, the response is displayed as a string in the
current browser session - so I know that the response is being returned.
Just can't seem to get the resposne posted into the .asp file.

Any suggestions/ideas? Any questions to help get to the solution?

Many thanks!

Sean
David Wang [Msft]

2006-06-28, 6:22 pm

Can you verify that the client will re-POST form data to follow a
Redirection sent by the server?

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Sean" <Sean@discussions.microsoft.com> wrote in message
news:1D8ACF98-44B9-478A-BFD3-EBE30387F0AB@microsoft.com...
> Using IIS6 on 2003 SP1. What I am doing is submitting a credit card
> approval
> request to an HTTPS (ssl) site. The response is being redirected to an
> .ASP
> file - which is set up to accept the fields being returned. Problem is I
> never get anything returned to the file. I have illiminated the firewall
> through Cisco's help. The problem is definitely at the server and I
> believe
> it is security related. If I use the HTTPS (ssl) site without redirecting
> the response to any file, the response is displayed as a string in the
> current browser session - so I know that the response is being returned.
> Just can't seem to get the resposne posted into the .asp file.
>
> Any suggestions/ideas? Any questions to help get to the solution?
>
> Many thanks!
>
> Sean



David Wang [Msft]

2006-06-28, 7:19 pm

Can you verify that the client will re-POST form data to follow a
Redirection sent by the server?

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Sean" <Sean@discussions.microsoft.com> wrote in message
news:1D8ACF98-44B9-478A-BFD3-EBE30387F0AB@microsoft.com...
> Using IIS6 on 2003 SP1. What I am doing is submitting a credit card
> approval
> request to an HTTPS (ssl) site. The response is being redirected to an
> .ASP
> file - which is set up to accept the fields being returned. Problem is I
> never get anything returned to the file. I have illiminated the firewall
> through Cisco's help. The problem is definitely at the server and I
> believe
> it is security related. If I use the HTTPS (ssl) site without redirecting
> the response to any file, the response is displayed as a string in the
> current browser session - so I know that the response is being returned.
> Just can't seem to get the resposne posted into the .asp file.
>
> Any suggestions/ideas? Any questions to help get to the solution?
>
> Many thanks!
>
> Sean



Sean

2006-06-29, 10:06 am

I could not wait - opened a case with Microsoft Support and got the problem
resolved. It ended up being 2 things - the ASP code and the IIS Security -
all is well now.

Sean

"David Wang [Msft]" wrote:

> Can you verify that the client will re-POST form data to follow a
> Redirection sent by the server?
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
>
> "Sean" <Sean@discussions.microsoft.com> wrote in message
> news:1D8ACF98-44B9-478A-BFD3-EBE30387F0AB@microsoft.com...
>
>
>

Sean

2006-06-29, 1:20 pm

I could not wait - opened a case with Microsoft Support and got the problem
resolved. It ended up being 2 things - the ASP code and the IIS Security -
all is well now.

Sean

"David Wang [Msft]" wrote:

> Can you verify that the client will re-POST form data to follow a
> Redirection sent by the server?
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
>
> "Sean" <Sean@discussions.microsoft.com> wrote in message
> news:1D8ACF98-44B9-478A-BFD3-EBE30387F0AB@microsoft.com...
>
>
>

David Wang [Msft]

2006-06-30, 2:13 am

What "IIS Security" was involved with this? Failure to Redirect POST is a
client-side issue...

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Sean" <Sean@discussions.microsoft.com> wrote in message
news:19710826-1CC5-4F33-9809-A7B8D45F2998@microsoft.com...[vbcol=seagreen]
>I could not wait - opened a case with Microsoft Support and got the problem
> resolved. It ended up being 2 things - the ASP code and the IIS
> Security -
> all is well now.
>
> Sean
>
> "David Wang [Msft]" wrote:
>


David Wang [Msft]

2006-06-30, 7:24 am

What "IIS Security" was involved with this? Failure to Redirect POST is a
client-side issue...

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Sean" <Sean@discussions.microsoft.com> wrote in message
news:19710826-1CC5-4F33-9809-A7B8D45F2998@microsoft.com...[vbcol=seagreen]
>I could not wait - opened a case with Microsoft Support and got the problem
> resolved. It ended up being 2 things - the ASP code and the IIS
> Security -
> all is well now.
>
> Sean
>
> "David Wang [Msft]" wrote:
>


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com