Nice.

Now we just wait for patches...

On Sun, Dec 27, 2009 at 14:29, Benjamin Zachary - Lists
<[email protected]> wrote:
> Well I went on that premise and re-applied all the permissions in IIS6 using: 
>  secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
> /verbose
>
> Soon as I did that everything still didn’t work, but then I noticed that on 
> my rpc it was set to scripts only, and another client's rpc was set to 
> scripts and executables so I did that and all is well again.
>
> Thanks for pointing me in the right direction.
>
> -----Original Message-----
> From: Kurt Buff [mailto:[email protected]]
> Sent: Sunday, December 27, 2009 12:42 PM
> To: MS-Exchange Admin Issues
> Subject: Re: RPC / HTTPS troubleshooting
>
> In particular:
>
> http://isc.sans.org/diary.html?storyid=7816
>
> On Sun, Dec 27, 2009 at 08:32, Michael B. Smith <[email protected]> wrote:
>> You shouldn’t get prompted to download the dll. You should get a blank
>> screen or an “invalid post” error.
>>
>>
>>
>> Has someone been messing with your iis applications?
>>
>>
>>
>> From: Benjamin Zachary - Lists [mailto:[email protected]]
>> Sent: Sunday, December 27, 2009 9:43 AM
>> To: MS-Exchange Admin Issues
>> Subject: RPC / HTTPS troubleshooting
>>
>>
>>
>> I have a 2003 server with exchange 2003 on it. Its been running rpc/https
>> for over a year and last week it just stopped working.  Doing an rpcdiag
>> just shows Disconnected after I get asked for credentials.  It works over a
>> vpn.
>>
>>
>>
>> I went back through the initial setup and that didn’t work, so I rebuilt the
>> firewall and that didn’t do it.
>>
>>
>>
>> The odd thing is that I can goto https://mydomain.com/rpc/rpcproxy.dll I get
>> popped for credentials (no cert error) and then prompted to download/save
>> the dll file.
>>
>>
>>
>> In IIS logs I see the MSPRC 501 messages, which seem to be the same messages
>> that happen when I connect to the vpn or from outside the firewall..
>>
>>
>>
>> Any ideas where else to look? Or what would the difference be between vpn
>> and nating? I was thinking maybe the 6001-6004 ports but doesn’t really make
>> sense.
>>
>>
>>
>> Thanks in advance
>>
>>
>>
>>
>
>
>
>
>
>
>


Reply via email to