In the Analog Failure Report I get entries like this: /d/winnt/system32/cmd.exe /d/winnt/system32/cmd.exe?/c+dir /c/winnt/system32/cmd.exe
I am using URL scan on my WinNT 4 system, however in the log files a line like "Rejected by URL Scan" appears. In a few weeks I'll just be using Win2003 with IIS6 and according to Microsoft you do not need to have URL Scan install on IIS6 Systems http://www.microsoft.com/technet/security/tools/urlscan.mspx#ECAA. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aengus Sent: Sunday, April 24, 2005 6:57 AM To: Support for analog web log analyzer Subject: Re: [analog-help] Files/Directory not being excluded from FailureReport On Saturday, April 23, 2005 11:44 PM [GMT], Pete Letkeman <[EMAIL PROTECTED]> wrote: > I am using Analog with Report Magic on an IIS 6 system. I am having > problems removing/excluding certain files and directories. What problems are you having? > #Exclude Windows/System & Windows/System32 FILEEXCLUDE > /winnt/system32/* FILEEXCLUDE /windows/system32/* FILEEXCLUDE > /winnt/system/* FILEEXCLUDE /windows/system/* > > #Exclude /scripts/ > FILEEXCLUDE /scripts/* > FILEEXCLUDE /msadc/* > FILEEXCLUDE /winnt/system32/cmd.exe > FILEEXCLUDE /winnt/system32/root.exe > FILEEXCLUDE /windows/system32/cmd.exe > FILEEXCLUDE /windows/system32/root.exe > > #Exclude Front Page stuff > FILEEXCLUDE /_vti_bin/* > FILEEXCLUDE /_derived/* > FILEEXCLUDE /_themes/* > FILEEXCLUDE /_vti_inf.html FILEEXCLUDE /winnt/* FILEEXCLUDE /windows/* FILEEXCLUDE /scripts/* FILEEXCLUDE /msadc/* FILEEXCLUDE /_* Have you considered using URLScan? http://www.microsoft.com/technet/security/tools/urlscan.mspx Aengus +----------------------------------------------------------------------- +- | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +----------------------------------------------------------------------- +- +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
