You should be careful when opening those restrictions. Kletz for example uses .. as part of its attack to gain control of a command shell and execute files. Be sure you other IIS restrictions like the script directory are properly secured.
Mark Plus Pack for OWA SecureLogoff for OWA http://www.messageware.net -----Original Message----- From: Jason Brown [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 18, 2002 11:12 AM To: Exchange Discussions Subject: RE: Some messages viewed in OWA 2000 give 404 errors? Thanks Tom. This article pointed me in the right direction. Problem had to do with URLscan blocking the url sequence '..' . Had to open up the URLscan.ini and remove the restriction. -----Original Message----- From: Tom Meunier [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 17, 2002 4:41 PM To: Exchange Discussions Subject: RE: Some messages viewed in OWA 2000 give 404 errors? Do the message subjects contain punctuation in the subject line that has been denied by URLscan? http://support.microsoft.com/default.aspx?scid=kb;EN-US;q309508 > -----Original Message----- > From: Jason Brown [mailto:[EMAIL PROTECTED]] > Posted At: Wednesday, July 17, 2002 02:08 PM > Posted To: MSExchange Mailing List > Conversation: Some messages viewed in OWA 2000 give 404 errors? > Subject: Some messages viewed in OWA 2000 give 404 errors? > > > Having this problem with random e-mails. Sometimes even with > read upon > receipt notifications. Sometime in plain text e-mails? > This seems to be an issue with front-end servers because when > I connect to the back-end Exchange box I don't have this problem. > No errors in event logs... Any ideas? > > TIA! > > -Jason _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
