Re: Exchange 2003-SP2 OWA perod at end of subject line - No urlscan

Tech-Archive recommends: Fix windows errors by optimizing your registry

Ah, right. Does the problem server still have URLScan installed? If so,
what does the DenySequences part of URLScan.ini look like?

"JU" <puart@xxxxxxxxxxx> wrote in message
news:%23F08txhtIHA.3780@xxxxxxxxxxxxxxxxxxxxxxx
No, both are Windows 2000 Advanced Server

Thanks.

"Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in
message news:ebElKUhtIHA.4952@xxxxxxxxxxxxxxxxxxxxxxx

Windows 2000 (with IIS5) does not have the same security features that
IIS6 has. I assumed that the problem server is Win2003?

Lee.

"JU" <puart@xxxxxxxxxxx> wrote in message
news:uQRji2ftIHA.4528@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Lee,

Weird thing is that we have another server also with Exchange 2003-SP2
on Windows 2000 AS-SP4 that does not have this problem.

Hopefully someone has found a solution.


"Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in
message news:#fjiF4btIHA.3792@xxxxxxxxxxxxxxxxxxxxxxx
"JU" <puart@xxxxxxxxxxx> wrote in message
news:%23Qv$q4RtIHA.576@xxxxxxxxxxxxxxxxxxxxxxx
Has anyone encountered a problem typical of urlscan where certain
emails (subjects end in .. ) get an HTTP 404 error in OWA, but urlscan
is not installed on a standalone server?

I even installed urlscan and saw that it did filter those messages,
removed filter, but it seems that there's something still bloquing the
page even after urlscan.

Any ideas?

Thanks.

I've heard of it, yes, but I don't know of any fix, I'm afraid. It
also seems to happen to all messages in a folder whose name ends in a
period. IIS6 doesn't seem to need URLScan any more, as this kind of URL
protection is built-in (i.e. you can't turn it off). Installing
Exchange adds filters to bypass some of this URL blocking on the
Exchange VDir only, otherwise there would be a lot more messages that
you wouldn't be able to open (anything with a colon in the subject, for
example, which includes most replies), but they seem to have overlooked
this one.

Lee.

--
______________________________________

Outlook Web Access For PDA , OWA For WAP
www.leederbyshire.com
email a@t leederbyshire d.0.t c.0.m
______________________________________





.

Relevant Pages

  • Re: Exchange 2003-SP2 OWA perod at end of subject line - No urlscan
    ... I even installed urlscan and saw that it did filter those messages, ... Installing Exchange adds filters ...
    (microsoft.public.exchange.clients)
  • Re: Lockdown and UrlScan
    ... I don't think urlscan will 'affect' the server performance. ... > After installing the above programs on IIS5, ... we have another application that executes as EXE (shopping cart) and ...
    (microsoft.public.inetserver.iis.security)
  • Re: SBS2K, Exch. 2K, Public Folder error 80040e19
    ... Installing the .Net Framework will install them if they are ... > what sort of server is being locked down. ... URLScan and/or IISLockdown might not be part of SBS2000's initial ... the only changes to IIS since before Public Folders stopped ...
    (microsoft.public.windows.server.sbs)
  • Re: Blackice missing Code Red?
    ... I definitely recommend installing URLscan which comes ... without opening port 80 in BID no-one can get to my port 80. ...
    (comp.security.firewalls)
  • Re: URL Encoding of & Charactor on IIS? This Should be Simple...
    ... URLScan has it's own logfile, which logs all rejected requests ... servers installing stuff without your knowledge, ...
    (microsoft.public.inetserver.iis)