UrlScan

Hi paul,

you are kind of right, features of urlscan were built into iis6. You do
have to now allows file extension types. If you look in the webservice
extensions section you can allow and prohibit file types liek urlscan.

Best regards,
Jason M. Murray [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm.


--------------------
| From: "Paul Schandel" <pschandel.TakeThisOut@scu.edu>
| References: <OAzjLMciDHA.1624.TakeThisOut@tk2msftngp13.phx.gbl>
| Subject: Re: UrlScan
| Date: Fri, 3 Oct 2003 08:44:35 -0700
| Lines: 28
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <ewuXFVciDHA.2120.TakeThisOut@TK2MSFTNGP10.phx.gbl>
| Newsgroups: microsoft.public.inetserver.iis
| NNTP-Posting-Host: pegasus.scu.edu 129.210.211.14
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis:278129
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Never mind. After some further reading I realized URLScan is something I
| have to install. I thought from other things I had read that URLScan was
| turned on by default in IIS 6.0
|
| --
| Thanks
| Paul Schandel
|
| ------------------
| http://www.get-me-home.org
| "Paul Schandel" <pschandel.TakeThisOut@scu.edu> wrote in message
| news:OAzjLMciDHA.1624@tk2msftngp13.phx.gbl...
| > Where do I locate this to turn it off for a test?
| >
| > I want to see if this is actually causing a script not to run.
| >
| >
| >
| > --
| > Thanks
| > Paul Schandel
| >
| > ------------------
| > http://www.get-me-home.org
| >
| >
|
|
|
 >> Stay informed about: UrlScan 

IIS6 has many of URLScan's feature built in (and expanded). That said,
URLScan is an optional install on IIS6. It is NOT installed by default.

You should read this for full details concerning URLScan and IIS6:
<a style='text-decoration: underline;' href="http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/urlscan.asp" target="_blank">http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec...ty/tool</a>

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Paul Schandel" <pschandel.RemoveThis@scu.edu> wrote in message
news:ewuXFVciDHA.2120@TK2MSFTNGP10.phx.gbl...
Never mind. After some further reading I realized URLScan is something I
have to install. I thought from other things I had read that URLScan was
turned on by default in IIS 6.0

--
Thanks
Paul Schandel

------------------
<a style='text-decoration: underline;' href="http://www.get-me-home.org" target="_blank">http://www.get-me-home.org</a>
"Paul Schandel" <pschandel.RemoveThis@scu.edu> wrote in message
news:OAzjLMciDHA.1624@tk2msftngp13.phx.gbl...
 > Where do I locate this to turn it off for a test?
 >
 > I want to see if this is actually causing a script not to run.
 >
 >
 >
 > --
 > Thanks
 > Paul Schandel
 >
 > ------------------
<font color=purple> > <a style='text-decoration: underline;' href="http://www.get-me-home.org</font" target="_blank">http://www.get-me-home.org</font</a>>
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: UrlScan