Re: URLSCAN blocking all requests

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ed Hansberry, MS-MVP/Mobile Devices (spamfree-silvernino_at_hotmail.spambegone.com)
Date: 06/18/04 

Date: Fri, 18 Jun 2004 07:00:53 -0500

"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote:

>Hi,
>
>Are you saying that:
>a) OWA is working fine
> -and-
>b) URLScan is reporting everything being blocked (even though it isn't)?
>
>If so, which logs are you looking in? The URLScan logs will only show the
>things that URLScan is actually blocking (so you won't see anything that
>URLScan is letting through. To see everything you need to look in the IIS
>website logs).

No. OWA isn't working either. Every request to IIS is showing up in
the URLScan logs as being rejected.

An example of the log:
2004-06-18 11:59:10 10.0.0.50 - 10.0.0.1 80 GET /<Rejected-By-UrlScan>
~/ 404 123 4203 365 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1)

That from just trying to reach the main page.

>Cheers
>Ken
>
>"Ed Hansberry, MS-MVP/Mobile Devices"
><spamfree-silvernino@hotmail.spambegone.com> wrote in message
>news:c5f4d0599m1cd14t4mcupm9oocto3jhea3@4ax.com...
>: I just upgraded to SP4 on my WIndows 2000 SP3 box. It has Exchange
>: 2000, SP3 with the April hotfix rollup on it.
>:
>: IIS is working fine as Exchange requires it and is working fine, but
>: when I look at the URLSCAN logs, *everything* is being blocked. Any
>: clues?
> 

-- 
__________________________________________________________________________________
Ed Hansberry  (Please do *NOT* email me. Post here for the benefit of all)
What is on my Pocket PC? http://www.ehansberry.com/
Microsoft MVP - Mobile Devices   www.pocketpc.com
What is an MVP? - http://mvp.support.microsoft.com/

Relevant Pages

  • Re: Security problem ?
    ... firewall logs as well, especially for suspicious outgoing traffic from your ... You could try checking the URLScan logs, ... Note that IIS security isn't just patches for IIS and Windows... ... > I have a web server and it has a problem that I don't know how to resolve. ...
    (microsoft.public.inetserver.iis.security)
  • OWA not displaying properly after upgrade- E2K to E2K3
    ... Everything appears to work fine except OWA. ... No background, no graphics, no buttons ... URLScan was installed and configured before the upgrade. ... required for IIS 6.0 and can cause problems that are consistent with these ...
    (microsoft.public.exchange.setup)
  • RE: IIS 5 Log FIle Question
    ... IIS 5 Log FIle Question ... Below is a snippet from the logs. ... Does the fact the it says <Rejected by urlscan> imply ... This E-mail and its attachments have been scanned for viruses before delivery. ...
    (Security-Basics)
  • RE: OWA
    ... Remove URLScan from IIS and test. ... Its an ISAPI filter. ... The URLScan Utility Does Not Allow You to Open Messages in OWA ...
    (microsoft.public.exchange2000.general)
  • Re: OWA and URLScan
    ... The issues with URLSCAN and OWA are pretty well documented - please go to ... front of a computer where I can find the specifics, but the urlscan tool ... logs anything it blocks. ...
    (microsoft.public.backoffice.smallbiz2000)