Re: Host Company web on SBS 2003

Tech-Archive recommends: Fix windows errors by optimizing your registry

In news:1170514540_21373@xxxxxxxxxxxxxxxxxxxx,
Leythos <Void@xxxxxxxxxxx> wrote:

On Fri, 02 Feb 2007 13:48:50 -0800, Andy wrote:

Really, how so? Both are websites hosted by IIS.

HTTPS and RWW requires that the user know an account and password,
and the typical attack methods of HTTP don't work until the account
is accessed.

In HTTP your server is processing anything they throw at it before
knowing who.

Rubbish. Traffic must work its way through IIS to get authenticated.

--
Mariëtte Knap
One of the Magical M&M's
www.smallbizserver.net
Forum: http://www.smallbizserver.net/Default.aspx?tabid=53
Articles: http://www.smallbizserver.net/Default.aspx?tabid=266



.

Relevant Pages

  • Re: SSL Issue - Urgent
    ... Generically extensible -- the translation device gives some hint of the ... so the device would need to set a proprietary HTTP Request header indicating ... This has been done on Apache and IIS as well. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Rpc over http
    ... I am having problems with http over rpc...it was working well for 8 months ... 2.Please collect the IIS metabase on the SBS server: ... Please collect the IIS log on RPC Proxy Server for further analysis: ...
    (microsoft.public.windows.server.sbs)
  • Handling HTTP 500 Account Locked
    ... When a user's account has been locked due to password violations and ... referenced account is currently locked...". ... This is due to the browser option "Show Friendly HTTP error messages" ... We're using Win2k, IIS 5.0, Active Directory with Digest ...
    (microsoft.public.inetserver.iis.security)
  • Re: Internet syncronisation failed after installing security update
    ... after the latest updates our internet> syncronisation behaved the same...not working anymore. ... after the newest patches iis is ignoring the PUT-command via http. ... before the patches were installed> the log shows http response 200 and 201 for the upload of tempfiles and> execution of mstrai40.exe. ... that leads to the conclusion that> the latest updates shut down the PUT functionality via http and by the way> messing up the access replication. ...
    (microsoft.public.access.replication)
  • Re: Windows 2003 remote admin access
    ... access done in context of the authenticated browsing account (i.e. ... be limited to areas defined as vdirs in IIS and/or FTP. ... particular ports inbound so access on any other ports shouldn't be ... The user does have HTTP and FTP web authoring access but this ...
    (microsoft.public.security)