FrontPage and UrlScan

[Guest]

Hi all

I am currently admin for a number of web servers running FP Extensions.

I have ran the IIS Lockdown tool on them and have read the Microsoft articles on how to modify the UrlScan.ini to allow it to work with the server, however...

I have a few customers who want to use the searchBot and web counter on their sites but the url scan is set to block url requests with .idq and .exe included in them for security reasons, it also still blocking the http method SEARCH.

Is this still the case or is it ok to now open them up?

Any help would be appreciated.

 

[Tom Pepper Willett]

Opening them up is your choice.
--
-----
Tom Pepper Willett
Microsoft MVP - FrontPage
http://www.microsoft.com/office/frontpage/prodinfo/default.mspx
http://msdn.microsoft.com/office/understanding/frontpage/
----
| Hi all
|
| I am currently admin for a number of web servers running FP Extensions.
|
| I have ran the IIS Lockdown tool on them and have read the Microsoft
articles on how to modify the UrlScan.ini to allow it to work with the
server, however...
|
| I have a few customers who want to use the searchBot and web counter on
their sites but the url scan is set to block url requests with .idq and .exe
included in them for security reasons, it also still blocking the http
method SEARCH.
|
| Is this still the case or is it ok to now open them up?
|
| Any help would be appreciated.

 

[Guest]

Thanks Tom for your prompt reply.

What is your recommendation. If I do open them up, how unsecured does it make the server?

Scott

----- Tom Pepper Willett wrote: -----

Opening them up is your choice.
--
-----
Tom Pepper Willett
Microsoft MVP - FrontPage
http://www.microsoft.com/office/frontpage/prodinfo/default.mspx
http://msdn.microsoft.com/office/understanding/frontpage/
----
| Hi all
|
| I am currently admin for a number of web servers running FP Extensions.
|
| I have ran the IIS Lockdown tool on them and have read the Microsoft
articles on how to modify the UrlScan.ini to allow it to work with the
server, however...
|
| I have a few customers who want to use the searchBot and web counter on
their sites but the url scan is set to block url requests with .idq and .exe
included in them for security reasons, it also still blocking the http
method SEARCH.
|
| Is this still the case or is it ok to now open them up?
|
| Any help would be appreciated.