Nice. Now we just wait for patches...
On Sun, Dec 27, 2009 at 14:29, Benjamin Zachary - Lists <[email protected]> wrote: > Well I went on that premise and re-applied all the permissions in IIS6 using: > secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb > /verbose > > Soon as I did that everything still didn’t work, but then I noticed that on > my rpc it was set to scripts only, and another client's rpc was set to > scripts and executables so I did that and all is well again. > > Thanks for pointing me in the right direction. > > -----Original Message----- > From: Kurt Buff [mailto:[email protected]] > Sent: Sunday, December 27, 2009 12:42 PM > To: MS-Exchange Admin Issues > Subject: Re: RPC / HTTPS troubleshooting > > In particular: > > http://isc.sans.org/diary.html?storyid=7816 > > On Sun, Dec 27, 2009 at 08:32, Michael B. Smith <[email protected]> wrote: >> You shouldn’t get prompted to download the dll. You should get a blank >> screen or an “invalid post” error. >> >> >> >> Has someone been messing with your iis applications? >> >> >> >> From: Benjamin Zachary - Lists [mailto:[email protected]] >> Sent: Sunday, December 27, 2009 9:43 AM >> To: MS-Exchange Admin Issues >> Subject: RPC / HTTPS troubleshooting >> >> >> >> I have a 2003 server with exchange 2003 on it. Its been running rpc/https >> for over a year and last week it just stopped working. Doing an rpcdiag >> just shows Disconnected after I get asked for credentials. It works over a >> vpn. >> >> >> >> I went back through the initial setup and that didn’t work, so I rebuilt the >> firewall and that didn’t do it. >> >> >> >> The odd thing is that I can goto https://mydomain.com/rpc/rpcproxy.dll I get >> popped for credentials (no cert error) and then prompted to download/save >> the dll file. >> >> >> >> In IIS logs I see the MSPRC 501 messages, which seem to be the same messages >> that happen when I connect to the vpn or from outside the firewall.. >> >> >> >> Any ideas where else to look? Or what would the difference be between vpn >> and nating? I was thinking maybe the 6001-6004 ports but doesn’t really make >> sense. >> >> >> >> Thanks in advance >> >> >> >> > > > > > > >
