Re: Outlook Web Access Issue

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: al ({ask_me}_at_blueyonder.co.uk)
Date: 03/22/04


Date: Mon, 22 Mar 2004 00:00:58 -0000


"Matthew Fisher" <mfisher@apcsit.com.au> wrote in message
news:c62e01c40f9a$93147c30$a001280a@phx.gbl...
> Never Mind, it was a URLscan 2.5 configuration issue.

Yeah, I got that too when I first setup! It was because of my subjects
having ".." or "&", etc. in them. Turned off the filters in the .ini file
to fix as the business case of not being able to open such common emails was
too great.

However that only fixed it internally, where URLScan is install on the FE
and all the BE servers. To get OWA from the outside, it goes through ISA
Server, which uses it's own version of URLScan AFAICS. Anyone know where it
stores its list of banned verbs, etc.?

a



Relevant Pages

  • Re: Logfile question
    ... Where can I find this functionality inside Windows Server 2003 webserver? ... > integrated UrlScan features into their server management practices for IIS ... > and for other Microsoft servers. ...
    (microsoft.public.inetserver.iis.security)
  • Re: URLScan and Hacking
    ... I'm not certain how one comes to the conclusion that URLScan "announces" its ... I'd think that if URLScan's presence alters hacker mentality, ... Has anyone seen an increase in their servers being hacked ...
    (microsoft.public.inetserver.iis.security)
  • More details on ASP.NET vulnerability
    ... Here are some ways to prevent this and other related attacks that might appear in the future: ... Use URLScan, even on IIS 6 servers. ...
    (NT-Bugtraq)