Newsgroup: it.comp.www.server
Titolo: IIS lockdown... TROPPO lockdown

tant'è che non va più.
sul win2000 srv inglese ho messo:
1) sp4
2) windowsupdate
3) hfnetchk
4) iislockdown (ho selezionato la configurazione dynamic web server per le
asp, è quel che mi serve)
IIS mo è proprio LOCKED.
che è successo?
:o(
ciao
spintop

 che è successo?
controlla il log di iislockdown e controlla il registro degli eventi non
vorrei che qualcosa vada in conflitto, oppure non hai fatto il reboot dopo
iislockdown.
-- 
ITHost (your host company)
Technical Manager
C. Paparelli (MCSE,MCSD,MCDBA)
http://www.ithost.ch

 vorrei che qualcosa vada in conflitto,
allora, stavolta posso assicurare che io non c'entro nulla.
quando ho installato iislockdown (posso installarlo *sopra* quello attuale
sostituendolo con la nuova installazione?) ho specificato CHIARO e tondo che
le pagine asp mi servivano....E COME se mi servivano.
iislockdown (anzi, URLSCAN) nei registri log ha impostato come DISALLOWED le
pagine asp, di conseguenza la mia default.asp va a farsi benedire.
ora, nella cartella C:\WINNT\system32\inetsrv\urlscan\ c'è il file
urlscan.ini, l'ho editato e ho riavviato la macchina.
questo è il log (scusa se sto messaggio diventa un papiro):
immagini di si.
[07-13-2003 - 14:59:56] -- Filter initialization time: [07-13-2003 -
14:59:56]  --
[07-13-2003 - 14:59:56] ---------------- UrlScan.dll
Initializing ----------------
[07-13-2003 - 14:59:56] UrlScan will return the following URL for rejected
requests: "/<Rejected-By-UrlScan>"
[07-13-2003 - 14:59:56] URLs will be normalized before analysis.
[07-13-2003 - 14:59:56] URL normalization will be verified.
[07-13-2003 - 14:59:56] URLs must contain only ANSI characters.
[07-13-2003 - 14:59:56] URLs must not contain any dot except for the file
extension.
[07-13-2003 - 14:59:56] Only the following verbs will be allowed (case
sensitive):
[07-13-2003 - 14:59:56]  'GET'
[07-13-2003 - 14:59:56]  'HEAD'
[07-13-2003 - 14:59:56]  'POST'
[07-13-2003 - 14:59:56] Only the following extensions will be allowed:
[07-13-2003 - 14:59:56]  '.asp'
[07-13-2003 - 14:59:56]  '.htm'
[07-13-2003 - 14:59:56]  '.html'
[07-13-2003 - 14:59:56]  '.txt'
[07-13-2003 - 14:59:56]  '.jpg'
[07-13-2003 - 14:59:56]  '.jpeg'
[07-13-2003 - 14:59:56]  '.gif'
[07-13-2003 - 14:59:56]  '.printer'
[07-13-2003 - 14:59:56] Requests containing the following headers will be
rejected:
[07-13-2003 - 14:59:56]  'translate:'
[07-13-2003 - 14:59:56]  'if:'
[07-13-2003 - 14:59:56]  'lock-token:'
[07-13-2003 - 14:59:56] Requests containing the following character
sequences will be rejected:
[07-13-2003 - 14:59:56]  '..'
[07-13-2003 - 14:59:56]  './'
[07-13-2003 - 14:59:56]  '\'
[07-13-2003 - 14:59:56]  ':'
[07-13-2003 - 14:59:56]  '%'
[07-13-2003 - 14:59:56]  '&'
[07-13-2003 - 15:00:59] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:04:25] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:04:40] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:05:44] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:06:01] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:06:03] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:06:23] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:06:24] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:06:32] Client at 
192.168.0.2
: URL contains extension
'.php', which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/default.php'
[07-13-2003 - 15:07:56] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
[07-13-2003 - 15:12:25] ---------------- UrlScan.dll
Terminating -----------------
[07-13-2003 - 15:12:44] ---------------- Initializing
UrlScan.log ----------------
[07-13-2003 - 15:12:44] -- Filter initialization time: [07-13-2003 -
15:12:44]  --
[07-13-2003 - 15:12:44] ---------------- UrlScan.dll
Initializing ----------------
[07-13-2003 - 15:12:44] UrlScan will return the following URL for rejected
requests: "/<Rejected-By-UrlScan>"
[07-13-2003 - 15:12:44] URLs will be normalized before analysis.
[07-13-2003 - 15:12:44] URL normalization will be verified.
[07-13-2003 - 15:12:44] URLs must contain only ANSI characters.
[07-13-2003 - 15:12:44] URLs must not contain any dot except for the file
extension.
[07-13-2003 - 15:12:44] Only the following verbs will be allowed (case
sensitive):
[07-13-2003 - 15:12:44]  'GET'
[07-13-2003 - 15:12:44]  'HEAD'
[07-13-2003 - 15:12:44]  'POST'
[07-13-2003 - 15:12:44] Only the following extensions will be allowed:
[07-13-2003 - 15:12:44]  '.asp'
[07-13-2003 - 15:12:44]  '.htm'
[07-13-2003 - 15:12:44]  '.html'
[07-13-2003 - 15:12:44]  '.txt'
[07-13-2003 - 15:12:44]  '.jpg'
[07-13-2003 - 15:12:44]  '.jpeg'
[07-13-2003 - 15:12:44]  '.gif'
[07-13-2003 - 15:12:44]  '.printer'
[07-13-2003 - 15:12:44] Requests containing the following headers will be
rejected:
[07-13-2003 - 15:12:44]  'translate:'
[07-13-2003 - 15:12:44]  'if:'
[07-13-2003 - 15:12:44]  'lock-token:'
[07-13-2003 - 15:12:44] Requests containing the following character
sequences will be rejected:
[07-13-2003 - 15:12:44]  '..'
[07-13-2003 - 15:12:44]  '\'
[07-13-2003 - 15:12:50] Client at 
192.168.0.2
: URL contains extension '.',
which is not specifically allowed. Request will be rejected.  Site
Instance='1', Raw URL='/'
al che ho scritto: 
http://nomeserver/default.asp
 ....... ma non va lo
stesso, mentre le pagine htm e html vanno
:o(
uffa che scocciatura sto urlscan... grrrrr...
ciao
spintop

dunque, sembra che si sia "ripreso" iis.
certo, ho dovuto reinstallare iislockdown..... vabč, roba da poco O__o
ad ogni modo nella seconda reinstallazione non mi ha chiesto niente,
mantenendo le impostazioni precedenti (perň ora va........ boh) e la cosa
non l'ho gradita, avrei voluto poter scegliere come installarlo.
mmah.....
cmq grazie di nuovo IThost, ho imparato una cosa in piů  :-)
ciao
spintop