I would allow it. Personally, there are many times where I need to pass multiple variables via a GET statement, and that restriction would prevent that from happening.
URLScan has an OWA sample configuration. I would suggest looking at that. http://support.microsoft.com/default.aspx?scid=kb;en-us;q309508 Steven --- Steven Dickenson <[EMAIL PROTECTED]> Computer Network Manager The Key School, Annapolis Maryland -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Hackney Sent: Wednesday, September 08, 2004 5:23 AM To: Exchange Discussions Subject: urlscan + OWA Had a strange occurrence the other day when a user could not open an email message using OWA. Tracked down the problem to be down to the URLScan. The email message subject had an '&' sign in and in the urlscan.ini I have the following entry under DenyUrlSequences: & ; Don't allow multiple CGI processes to run on a single request Would it be a good idea to allow this sequence or would this throw up further problems? Users connect to OWA thru over VPN, the server is behind a hardware firewall and we do not run any sites on IIS at present although we have plans to introduce an intranet but no external facing websites on IIS. Thanks This email is confidential and intended solely for the use of the individual(s) to whom it is addressed. It should not be deemed to constitute a binding contract between TKC Group and the recipient(s) unless a purchase order number is quoted. Any views or opinions presented are solely those of the author and do not necessarily represent those of TKC Group Ltd. If you are not the intended recipient(s), please do not copy or disclose its contents. Please return it to: [EMAIL PROTECTED] then delete the email. Scanned for viruses by MailDefender _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
