Charlie,
I highly doubt it's the Code Red worm. It's always been my policy to
remove any MS proprietary extensions from the mappings on the web
server. (Who the heck needs to be able to print off the Web
server!!!! That's what LANs are for) All extensions other than .asp, .jsp
and .html have been removed from the ISAPI filters. I did this prior to
any Security bulletins regarding the printers security hole or the code red
worm. In my opinion this is something everyone should do, but this isn't
the right forum for that discussion.
I noticed some com.livesoftware.jsp.JSPServlet: destroy arguments being
sent, but since they were at the end of the log I'm assuming this was from
me stopping the server and nothing more. If logging this activity is
normal, which it is then I think this is all it was.
--Mike
At 01:15 PM 8/6/2001 -0400, you wrote:
>Any possibility this could just be a side-effect of the code red worm? You
>say you're running IIS 5 on Win2k. The worm targets IIS 5 servers. I got hit
>with it last week. Motivated me to look into the patch (which was just as
>easily applied with an upgrade to Win2k SP2--if one wants everything in that
>SP, otherwise there's just the patch alone, available).
>
>Even if that's not the root of Michael's problem, let this be a warning to
>all others running IIS 5. The Code red worm is serious (it's not tragic for
>now, all you need to do is reboot to clear out the worm in its current
>form). The seriousness of this is underlined by the fact that it's mentioned
>on the front page of the MS site's "servers" section
>(http://www.microsoft.com/Servers/), and as well on the very front page of
>the MS site's (under "new downloads", for now).
>
>For more info, see
>http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutio
>ns/security/topics/codealrt.asp
>
>
>/charlie
>
>-----Original Message-----
>From: Michael Mierwinski [mailto:[EMAIL PROTECTED]]
>Sent: Monday, August 06, 2001 12:59 PM
>To: JRun-Talk
>Subject: JRun 2.3.3 159 Mysteriously gives NullPointerException
>
>
>We have several servers running JRun 2.3.3 build 159 and they have been
>running great for months on end w/o a problem. In the past week and a half
>I have noticed that the servers will mysteriously give this error when
>trying to run any .jsp file, even one with no JSP in it (i.e. just HTML w/
>a .jsp extension):
>
>500 Internal Server Error
>
>NullPointerException:
>com.livesoftware.jsp.JSPServlet
>
>None of the files change and the server does this randomly. We are running
>Win 2K Server, IIS 5.0, J2SE 1.3.1 and the only way I have been able to
>fix this problem is completely uninstall JRun, delete properties files and
>re-install.
>
>Does anyone have any ideas?
>
>Thanks,
>
>Mike
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
