Then why no http error?  I know what you are referring to.  I don't think that
is the case here.  This is an error reported by the ntiis_redirect.dll ISAPI
that came from the site I listed.  These errors are not occurring in the IIS
logs but in the log that was made from the link I gave you.  Notice the
[jk_isapi_plugin.c (588)]:

--
George Hester
_________________________________
"Mike Jackson" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> There's a filter that you can install in IIS to block those (see microsoft's
> web site, I don't remember the exact name but it's something like
> urlfilter).
> But what you're seeing is people trying to hack your box through known IIS
> security holes.
>
> --mikej
> -=-----
> mike jackson
> [EMAIL PROTECTED]
>
> -----Original Message-----
> From: news [mailto:[EMAIL PROTECTED]]On Behalf Of George Hester
> Sent: Thursday, July 25, 2002 12:26 PM
> To: [EMAIL PROTECTED]
> Subject: Weird errors in iis_redirect.log
>
>
> This is using Tomacat with IIS 5 Windows 2000 and the ISAPI available here:
>
> http://members.ozemail.com.au/~lampante/howto/tomcat/iisnt/#2
>
> In my log I am getting very many errors all the same and they are:
>
> [Sat Jul 20 23:23:56 2002]  [jk_isapi_plugin.c (588)]: HttpFilterProc
> [/scripts/..�/../winnt/system32/cmd.exe] contains forbidden escape
> sequences.
>
> Many of these; all the same; except the date changes.  They seem to occur
> every
> hour.
>
> Can I stop this and if so can you suuggest how?  Thanks.
>
> --
> George Hester
> _________________________________
>
>
>
>
>
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>





--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to