Nope, had to modify it. Run it at the command line with a /? and expand it
to a folder first. Then read, read, read .....
Be careful as it will go right ahead and install itself if you just run it
from Explorer. Nasty little habit that is and it puts you straight into the
glue without any preparation and understanding.
BE CAUTIOUS! but it does work very well so far.
Bording
At 10:15 PM 09/24/2001 -0500, you wrote:
>Did you use the default settings to install URLScan? Any particular changes
>you recommend to those trying it out?
>
>Todd
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]]On Behalf Of Bording
>Ostergaard
>Sent: Monday, September 24, 2001 9:25 PM
>To: [EMAIL PROTECTED]
>Subject: Re: [IMail Forum] Virus Attacks
>
>
>
>URLScan just released by Microsoft is doing a great job on our server by
>filtering malformed and disallowed requests before they ever get submitted
>to IIS. We turned on the log and in 16 hours we've picked up nearly a meg
>of reports on ongoing hacks and probes. Bastards!
>
>Read carefully before installing though as it is still a in "roll up your
>sleeves" release mode and is unsupported.
>
>So far our server has been happy with it in place with no problems or
>memory leaks and all sites are running just fine without any apparent
>performance degradation. Be mindful though and test it on a non-production
>server until you understand just how to configure it properly or it will
>shut you down.
>
>Bording
>
>
>At 08:52 PM 09/24/2001 -0500, you wrote:
> >Does anyone know of a utility that will automatically block those IIS
> >servers that constantly try to attack an Imail server to stop these
>constant
> >attempts to attack port 80? Has anyone written a script that will add them
> >to the kill file? I think this would be a great
> >script/software/enhancement!!!!
> >
> >20010924 204806 Socket Error - 63.237.172.134 Error while writing sockect
> >due to error 10054 or malicious connection type.
> >20010924 204806 Socket Error - 63.237.172.134 Error while writing sockect
> >due to error 10054 or malicious connection type.
> >20010924 204806 Socket Error - 63.237.172.134 Error while writing sockect
> >due to error 10054 or malicious connection type.
> >20010924 204807 Info - 63.237.172.134 GET /MSADC/root.exe?/c+dir
>HTTP/1.0.
> >
> >Anyone
> >
> >Tim D
> >
> >
> >
> >
> >
> >
> >
> >_______________________________________________________________
> >Sent using Novelty Mail the FREE EMAIL SERVICE. Click here
> >http://noveltymail.com to get your own free email using this or ANY of our
> >fun domain names.
> >
> >Please visit http://www.ipswitch.com/support/mailing-lists.html
> >to be removed from this list.
> >
> >An Archive of this list is available at:
> >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
