When did you apply the patches? Could you have been hit before you got the patches
on? We have had a couple of e-mail's on this also.
Here is the last thread I remember, maybe it will help:
>>> [EMAIL PROTECTED] 08/08/01 10:00AM >>>
Ok, further clarification.
Some peopleare seeing these crashes as the result of redirects done via IIS directly
(via MMC settings), but changing to an html page with a redirect in it seems to work
fine.
Roger
------------------------------------------------------
Roger D. Seielstad - MCSE MCT
Senior Network Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com
> -----Original Message-----
> From: Pam [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 08, 2001 10:53 AM
> To: IIS50 Discussions
> Subject: RE: POSSIBLE FIX CODE RED PATCH !!
>
>
> So what I'm understanding is:
>
> With Patch 001-033, and redirects set up in the MMC, systems can
> crash unexpectedly.
>
> Turn off the redirects at the MMC level, switch to using a
> page in that directory with the redirect tag in it, problem
> goes away.
>
> I've been seeing some quirky behavior of INETINFO on some
> servers (try to > stop the service, INETINFO blows up), but
> I haven't had a server crash yet.
>
> Pam
>
> -----Original Message-----
> From: Okie Tex [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 08, 2001 10:52 AM
> To: IIS50 Discussions
> Subject: Re: POSSIBLE FIX CODE RED PATCH !!
>
>
> We did this last night after John posted it on another
> mailing list. It worked for us as we had some redirects
> on some virtuals. Before doing this, we DID have the
> CodeRed Worm Patch from MS installed - however, our
> Inetinfo/DrWatson were bombing on us and we'd go down in
> between 10 minutes and a couple of hours.
>
> So - this, so far!! (fingers-crossed) - has worked for us and
> it's 10+ hours now since we did it - no downtime.
>
> System with problem: NT4,SP6a,Patch
>
> -ot
>
>
> >From: "John Cesta - Lists" <[EMAIL PROTECTED]>
> >Reply-To: "IIS50 Discussions" <[EMAIL PROTECTED]>
> >To: "IIS50 Discussions" <[EMAIL PROTECTED]>
> >Subject: POSSIBLE FIX CODE RED PATCH !!
> >Date: Tue, 7 Aug 2001 21:40:56 -0400
> >
> >
> >
> >I found this on a ColdFusion list I subscribe to.
> >
> >It may be a solution for the inetinfo crashes:
> >
> >
> >For over two weeks, a couple of shared web servers have
> >been going nuts. Dr. Watson locks Inetinfo, W3SVC stops,
> >cycling all services usually did the trick. This trend escalated
> >over the weekend with all of the probing going round.
> >
> >I gave in last night and called MSFT for help. He looked at
> >my Dr. Watson and quickly knew the problem, HTTPRedirects
> >in IIS after applying the CodeRed patch. I used MDUTIL.exe
> >to dump IIS to a text file and searched for HTTPRedirect.
> >Found a total of three across the two of them. Opened IIS,
> >reset IIS to point to a directory, put a Default.asp in that
> >directory with a single line <% RESPONSE.REDIRECT
> >"HTTP://[IP]"; %> . Cycled IIS and the problem was solved.
> >
> >MSFT did not charge as this is a bug in the IIS / CodeRed patch.
> >
> >John Cesta
JayW
>>> [EMAIL PROTECTED] 08/20/01 03:45PM >>>
IIS stopping without reasonyou know, I'm seeing the same thing on one of my
IIS 5.0 box and I've already applied the latest cumulative patch on Windows
2000 Server SP2. Even after the services stop, when I run the Code Red
scanner from Symantec and eEye, they both come out negative...
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
