IIS Support Blog

  • 416 Blog Articles
Options
481
Nedim on Jul 29 2021 02:24 PM
461
Nedim on Jul 29 2021 02:13 PM
1,343
Pingulea on Jul 23 2021 08:57 AM
1,011
Pingulea on Jul 23 2021 08:53 AM
875
Pingulea on Jul 23 2021 08:44 AM
715
Pingulea on Jul 23 2021 08:41 AM
647
Pingulea on Jul 23 2021 08:32 AM
732
ashfana on Jul 02 2021 09:59 PM
687
MattHamrick on Jul 01 2021 12:07 PM
869
Malathi_Pai on Jun 16 2021 09:15 AM
644
Nedim on May 25 2021 01:30 PM
1,001
Nedim on May 25 2021 01:27 PM
624
Nedim on May 25 2021 01:26 PM
593
Nedim on May 25 2021 01:24 PM
486
Nedim on May 25 2021 01:22 PM
473
Nedim on May 25 2021 01:19 PM
511
Nedim on May 25 2021 01:17 PM
1,788
Pingulea on Apr 16 2021 08:38 AM
903
Nedim on Mar 26 2021 11:01 AM
2,852
Nedim on Mar 26 2021 10:59 AM
1,134
Nedim on Mar 26 2021 10:58 AM
609
Nedim on Mar 26 2021 10:54 AM
832
Nedim on Mar 26 2021 10:53 AM

Latest Comments

in Host Header Vulnerability on Jul 28 2021 10:38 AM
I also notice that in a local LAN environment this requires you to use the FQDN. On the domain you could typically go to https://servername and it would load. Now you must use the FQDN like https://servername.domain.com. Could the 301 permanant redirect handle switching to the FQDN for you? Instead ...
0 Likes
in Host Header Vulnerability on Jul 28 2021 10:25 AM
This seems to eliminate the vulnerability from port 443 but my scanner is still showing it on port 80. While I could disable binding to port 80, we also use rewrite to redirect from 80 to 443. So I'm guessing the order in which this happens does matter?
0 Likes
@Prpillai Is it possible to repair the broken images? I cannot see from anywhere.Thanks in advance!
0 Likes
@KevinP_SBS I disagree; your message is specific to viewstate, mine was in a Web API app which means viewstate is irrelevant; we knew what size we wanted to limit for requests, and if you read my post, nor have I advocated setting huge buffer sizes.My solution allows people to set a fixed size for a...
0 Likes
@Jawahar Ganesh S , can procmon instance be run to capture only a particular process, ex-w3wp.exe without a user being logged in, like from Windows Task scheduler at a specific time? I understand that one can setup a task to run the procmon at a particular time, could you highlight if any arguments ...
0 Likes