appcmd and catching outgoing SMTP connectionsappcmd list requests /text:*
Hello,does anyone knows if appcmd runned with params:appcmd list requests /text:*can catch outgoing remote connection to SMTP port? This command allows to find out for sure what remote HTTP(S)...
View ArticleWindows authentication issue in IIS
Hi,We have deployed an application in IIS and enabled windows authentication. Our infra team has to remove one of the domain controllers used by this application for windows authentication. If they...
View ArticleModSecurity on IIS 8.5
I hope someone can help me out here. The ModSecurity forum is not very active, and I'm hoping someone here can provide me with some direction. I install the prerequisites and then installed ModSecurity...
View ArticleCan site secured by Client Certificate have an anonymous section?
We're building a ASP.NET Web API application that will only have a single "user", an external service. Our client requested that above SSL and IP filtering (which are outside the scope of the...
View ArticleModify ServerCertificate Message Following ServerHello in TLS
Is it possible to modify the certificate_list within the Server Certificate message in the TLS Handshake? After Server Hello message, the Server Certificate message follows. Per the RFC 5246 for TLS...
View ArticleHow do I enable ALPN and TLS session resumption (client tickets) in Windows...
According to the following TechNet article ALPN and TLS client-side session resumption should be supported in SChannel in Windows Server 2012...
View ArticleHTTP 401 error in IIS Web Service
I have an installation of Sharepoint 2013 Server comprising two Web and two Application SP 2013 servers running on WIndows Server 2012 R2. I have installed a Citrix CloudPortal Services Manager Web...
View ArticleIIS 10 Windows Authentication Https Issues
Hello,I just set up a site in IIS 10 using windows authentication and I'm having issues connecting to it using HTTPS on Firefox (Version 52), Safari on Mac, and Safari/Chrome on iOS devices. The site...
View ArticleWhite List IP connections
HiI have a website that allows users to purchase software and then receive a link to download.My download store wordpress plugin simply retrieves the file from a URL i specify. The file is stored on a...
View ArticleIIS 7.5 is being hacked with PHP content injection
My server is Windos Server 2008R2 SP1.I have already installed all the updates and deactivated ssl2 and ssl3, all DES and RC4.I also disabled the MD5.My Antivirus detects an OS Attack: GNU Bash...
View ArticleWordpress on IIS suddenly gets HTTP Error 401.3 - Unauthorized after changing...
Installed a wordpress website on IIS with Windows Server 2012 I had to migrate the site from a working site which happened to be on Server 2008 across to a virtual server running 2012. Migrated the...
View ArticleInherited IIS Authorization Rules
I'm trying to secure a specific application to one group, but the inherited allow all rule seems to override whatever rule I add. I can't remove it from the application, and there are other...
View ArticleHosted Website Issues related to IIS 7
i have a webpage hosted on domain on windows7 OS, when trying to access the hosted web link on different client it pops up credentials box and the page is only accessible if I enter the administrator...
View ArticleUrlScan Rejected URL+contains+dot+in+path
Hi,I just have a quick question. I'm getting the above error for a specific URL that contains 'javax.faces.resource'How do I allow URLs that contains 'javax.faces.resource' from UrlScan so it doesn't...
View ArticleSome file is not displayed in directory listing
Hi,I find that part of the folder like app_data, bin didn't display in directory listing while these folders should be located in the root path of the website. So how can I hide the folder for my...
View ArticleRestricte website by ip
So I have a Windows Server 2012 R2, with IIS 8. I have a website setup in IIS that hosts a webservice (old-school webservice .asmx), also on the same server is SQL DATA TOOLS and an SSIS package. I...
View ArticleI don't want a video displayed on an intranet website to be able to be copied...
We have a local intranet site. I need to post some new videos that are for display only. I've already tried accessing them via the browser and they only play. But, as logged in as a normal, non...
View ArticleWebDAV with Windows and Digest Authentication
Hello to everyone!I'm newbie to IIS and I want to ask the following question:I have an Azure Windows 2012R2 server with IIS 8.5 (WebDAV) only through HTTPS to share files to my windows users wherever...
View ArticleIIS 8.5 Web App Deployment Error
On my sql server database, i do have a table, inside the table i do have a columns named 'SQL_HOST' - default binding value was host_name() & 'SQL_ USER' - suser_sname().The problem is how to...
View Article