Dave Watts wrote:
> There's a new IIS tool from Microsoft called URLScan, which allows you to
> create filtering rulesets that can prevent malicious requests. I just
> downloaded it, and it looks like it might be worth taking a look at, if
> you're using IIS:
>
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
> urlscan.asp
May I add the usual recommendation: try it on a staging server before
trying it in production. It broke a server by displaying all HTTP
headers in the page-output. But the uninstall works quite nicely.
Windows NT 4 SP6a & SRP
IIS 4 & 15 august SRP
CF 4.5.1 SP2 Ent
Jochem
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
