how do ya use urlscan i DL it but theres not instructions on how to edit it
or where to edit it.
[EMAIL PROTECTED]
[EMAIL PROTECTED]
----- Original Message -----
From: "Bording Ostergaard" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 24, 2001 11:02 PM
Subject: RE: [IMail Forum] Virus Attacks
>
> Nope, had to modify it. Run it at the command line with a /? and expand
it
> to a folder first. Then read, read, read .....
>
> Be careful as it will go right ahead and install itself if you just run it
> from Explorer. Nasty little habit that is and it puts you straight into
the
> glue without any preparation and understanding.
>
> BE CAUTIOUS! but it does work very well so far.
>
> Bording
>
>
> At 10:15 PM 09/24/2001 -0500, you wrote:
> >Did you use the default settings to install URLScan? Any particular
changes
> >you recommend to those trying it out?
> >
> >Todd
> >
> >-----Original Message-----
> >From: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED]]On Behalf Of Bording
> >Ostergaard
> >Sent: Monday, September 24, 2001 9:25 PM
> >To: [EMAIL PROTECTED]
> >Subject: Re: [IMail Forum] Virus Attacks
> >
> >
> >
> >URLScan just released by Microsoft is doing a great job on our server by
> >filtering malformed and disallowed requests before they ever get
submitted
> >to IIS. We turned on the log and in 16 hours we've picked up nearly a
meg
> >of reports on ongoing hacks and probes. Bastards!
> >
> >Read carefully before installing though as it is still a in "roll up your
> >sleeves" release mode and is unsupported.
> >
> >So far our server has been happy with it in place with no problems or
> >memory leaks and all sites are running just fine without any apparent
> >performance degradation. Be mindful though and test it on a
non-production
> >server until you understand just how to configure it properly or it will
> >shut you down.
> >
> >Bording
> >
> >
> >At 08:52 PM 09/24/2001 -0500, you wrote:
> > >Does anyone know of a utility that will automatically block those IIS
> > >servers that constantly try to attack an Imail server to stop these
> >constant
> > >attempts to attack port 80? Has anyone written a script that will add
them
> > >to the kill file? I think this would be a great
> > >script/software/enhancement!!!!
> > >
> > >20010924 204806 Socket Error - 63.237.172.134 Error while writing
sockect
> > >due to error 10054 or malicious connection type.
> > >20010924 204806 Socket Error - 63.237.172.134 Error while writing
sockect
> > >due to error 10054 or malicious connection type.
> > >20010924 204806 Socket Error - 63.237.172.134 Error while writing
sockect
> > >due to error 10054 or malicious connection type.
> > >20010924 204807 Info - 63.237.172.134 GET /MSADC/root.exe?/c+dir
> >HTTP/1.0.
> > >
> > >Anyone
> > >
> > >Tim D
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >_______________________________________________________________
> > >Sent using Novelty Mail the FREE EMAIL SERVICE. Click here
> > >http://noveltymail.com to get your own free email using this or ANY of
our
> > >fun domain names.
> > >
> > >Please visit http://www.ipswitch.com/support/mailing-lists.html
> > >to be removed from this list.
> > >
> > >An Archive of this list is available at:
> > >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
> >
> >Please visit http://www.ipswitch.com/support/mailing-lists.html
> >to be removed from this list.
> >
> >An Archive of this list is available at:
> >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
> >
> >Please visit http://www.ipswitch.com/support/mailing-lists.html
> >to be removed from this list.
> >
> >An Archive of this list is available at:
> >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
