Tag Info

New answers tagged

0

Here's what (someone at) Intel thought in 2009, with some caveats: "When contemplating the use of one socket with four cores versus two sockets populated with two cores each, resulting in an equal number of processor cores, the expected results aren’t so obvious. Generally, dual-socket configuration with dual-core CPUs in each socket yields higher ...


1

The value of a second CPU depends entirely on your load. In the case of a typical small business web server, a dual CPU system will likely not give you any performance increase. For a database - well, it really depends on the database and your query types and load. A typical website won't make much use of the CPU. Think of a DUAL CPU server as a server ...


1

Joseph's answer makes perfect sense, but it doesn't seem to work. The attribute 'serverAutoStart' on the site node in applicationHost.config is not changed. One way to change is: Set-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -filter "system.applicationHost/sites/site[@name='Default Web Site']" -name "serverAutoStart" -value "False" but ...


0

Let's try this: $site = Get-Item 'IIS:\sites\Default Web Site' $site.serverAutoStart = $False $site.Stop() Obviously, Default Web Site needs to be replaced. ;-) I don't have a test lab setup for this, so let me know if it works for you. There are a ton of options in the IIS PSProvider ... run the following to explore a bit more: $site = ...


2

You can do it with IIS configuration file web.config. In example: <system.webServer> <httpRedirect enabled="true" destination="http://www.contoso.com/" /> </system.webServer> You can find more informations on IIS sites: http://www.iis.net/configreference/system.webserver/httpredirect


0

You will not see the public ip in IIS binding because you don't have a NIC with an external IP connected to it. The cloud service is the one responsible to bridge your VM (or set of VMs) with the external world and it is also this service which will give you a public IP. To get your public IP (VIP) just navigate to Cloud Services -> Check ip in quick ...


0

The temporary configuration files in that folder are generated for security (isolation) reasons by the WAS process. There is a separate config file for each individual app pool. Details are described here: https://msdn.microsoft.com/en-us/library/dd163536.aspx It seems that restarting an app pool or IIS is not sufficient to trigger the WAS process to ...


0

I think the answer in the end is not really, without an ECDSA certificate. https://community.qualys.com/thread/15230 In order to escape catch-22, consider Chrome "modern cryptography" for traditional DHE a security theater, since it doesn't show DH size (ironically, even Internet Explorer does). The current stable Chrome shows "modern" on ...


0

An alternative solution to this problem is to upgrade Windows/IIS. IIS 8 natively supports overlapping recycles (IIS 7.5 requires the Application Initialization Module). This feature causes your application to continue running, with the recycle occuring separately. This results in a seamless recycle (i.e., no downtime during a recycle). Optionally, it ...


0

I recently ran into this problem, in a similar situation. But the answer from rjenkins would seem to cause problems with virtual applications that relied on inheritance of parent settings. If you know the name of the rewrite rule you can just do this: <rewrite> <rules> <remove name="RewriteNameToDisable" /> </rules> ...


0

Ran into this issue recently. Somebody had installed MalwareBytes onto the smtp server and the smtp mailroot folders were not whitelisted. The software treated everything in the queue as a potential spam campaign and let it time out enough times that it moved to badmail. All domains were affected. Had me puzzled (flawless operation for years now..) until I ...


0

I don't have a machine to test this right now, but I guess an additional condition like this should work: <conditions> <add input="{REMOTE_ADDR}" pattern="127.0.0.1" /> </conditions> or even: <conditions> <add input="{REMOTE_HOST}" pattern="localhost" /> </conditions>


4

You can use Microsoft's log parser utility. It has the capability of dumping into a SQL database as well as having the ability to create a checkpoint file so that it only imports records it hasn't processed. It can be used either as a stand alone executable or programmatically invoked via an ActiveX control


0

I got the failed request trace to display in IE (and it doesn't work on chrome) by pointing an IIS website at the folder and open it in IE - version 11 - from there. Other things I tried before this was add about:internet to trusted sites to run in compatibility mode. I am certain this has to do with security settings and there is probably an easier ...


1

I'm testing this on a fresh 2012 R2 server, when applying the Alexander Hass script (AH-Script), I still get the obsolete cryptography: My Chrome 43 supports the following Cipher suites: [C02B] TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 [C02F] TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 [009E] TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 [CC14] ...


8

It's not SHA causing the problem, it's TLS 1.0. The SSL Labs report for your domain gives the full story. Your server only supports TLS 1.0, not 1.1 or 1.2. In addition, it still supports obsolete ciphers like RC4, and doesnt support perfect forward secrecy. Tuning IIS to get better security is quite possible, but a pain to do by hand. This wonderful ...


0

Turns out the host had to first uncheck "Require SSL", then I was able to redirect traffic in web.config via: <rule name="HTTP to HTTPS redirect" stopProcessing="true"> <match url="(.*)" /> <conditions> <add input="{HTTPS}" pattern="off" ignoreCase="true" /> </conditions> <action type="Redirect" ...


1

First you need some sort of DNS setup. The quickest, dirtiest way is to add an entry to each system's hosts file. The entry would look like: 192.168.2.150 teehut.com in the system's hosts file.(%windir%\system32\drivers\etc\hosts in Windows.) This is a pain to administer, however. You'll want to look into a local DNS system such as dnsmasq or bind if you ...


9

Passive FTP requires that the FTP server have ports opened to it from the external network. Azure VM's use NAT, and thus needs extra configuration in order to support passive FTP. The (rough) checklist: Set the external VIP in the IIS FTP manager Set the port range to use (you might wanna show some moderation here - configuring thousands of ports are not ...


0

I had the same problem on IIS 7.5 I found the solution to be: Create a local user on the server with the share Create the network Share, giving the user created in step 1 the desired permissions. Windows will set up the permissions for the user you have specified Go to the virtual directory on IIS and open the "advanced settings" Enter the URL in physical ...


0

Solved. Eset NOD32 Antivirus version 4 was modifying HTML authorization headers on some computers. After disabling Web access protection everything works like a charm.


0

That is my understanding as well. The time interval counter would be reset each night at 3:00AM and will never reach its 29 hours threshold. I can't find any official information about this though. To confirm this assumption turn on event logging and let it run for a few days. Events should be in the Application Event Log with the source WAS


1

It is likely your application is explicitly looking for those groups on the local machine rather than the domain. If you wrote the application, you need to fix it. Otherwise, contact the application vendor.


0

Think about what you are doing here. You are saying if the user has not been authenticated correctly, display this other page to the user. But this (401) page can only be displayed to authenticated users. So IIS is not allowed to show that page to the user and displays a blank page instead. There are at least two ways around this, change your httpErrors to: ...


0

In terms of recreating the problem, the way most web servers (including IIS) handles multiple connections from one address/client is different than how it handles connections from multiple addresses/clients. Consider running a load generating tool (particularly one that can spoof multiple concurrent IP addresses or at least multiple virtual clients from the ...


0

How about this? <Host name="MyUrl.com"> <PathRegex regex=".*" authType="shibboleth" requireSession="true" /> </Host> Essentially, a regex to protect the entire root. Edit #1 - Just saw how old this was... yikes.


1

The common reason for why you see grayed out elements on the Logging dialog is because the feature is not enabled. In the Actions pane on the right side of IIS Manager click on Enable. Logging is enabled by default, so you only run into this if someone disabled it before.


0

This was resolved eventually. It turned out that no httpS listener was created by the DP installation process....


0

Basically, you should have a second NIC for this. If another NIC is not an option, try adding a virtual IP to the NIC, and then assign the certificates. I tried it once myself and it half worked, but didn't had enough time to do more testing.


0

serverVariable="RESPONSE_Strict-Transport-Security" is just IIS URL Rewrite syntax that means, apply this rule to the response http header with the name Strict-Transport-Security The module documentation explains this a little bit.


0

HTTP Strict Transport Security (HSTS) is a flag that a website can set so that all further communication from supported browsers will be forced to HTTPS. In your configuration, the flag tells browsers to only use HTTPS for your site for at least the next year. This is done through an outbound rewrite rule that adds the HSTS header to all outbound responses. ...


0

Never mind, unfortunately, the only computer which the server is not able to see via the IPV4 addresses is my own work-station! For my workstation, the server--which is a VMWARE VM running on the workstation, the server finds that as the IPV6 addresses. While I do need to make my workstation to be in the list of exceptions, at least I know why the problem ...


0

* means every logged in user. ? means anonymous users. You must use ?. <?xml version="1.0" encoding="utf-8" ?> <configuration> <system.web> <authorization> <deny users="?" /> </authorization> </system.web> </configuration>


0

Sorry, I'm so stupid. Found a solution 10 minutes after posting the question. You should add a FILTERING rule to the log-definition at the website level, that will filter http-requests targeted to the virtual subdirectory (by looking at the URL field for example). More info here: ...


0

The version of IIS (PWS) included in XP and versions since has a backdoor capable of revealing the plaintext password of the IIS user accounts. You can expose the password for the anonymous user account and plug it into the pesky UserID/Password prompt in your troubleshooting process. One of many tools capable of revealing this password and one I've chosen ...


0

If you have not Imported your certificate into Exchange, then you will need to open up the EMC, click Server Configuration, then on your Server right click and choose "Import Exchange Certificate". You can upload multiple Certificates using this method, which will allow your server to choose the correct Cert based on whether your traffic is requesting the ...


1

Yes, the term is Reverse Proxy, and you need URL Rewriting and Application Request Routing installed. http://weblogs.asp.net/owscott/creating-a-reverse-proxy-with-url-rewrite-for-iis After you’ve created your site then open up URL Rewrite at the site level. Using the “Add Rule(s)…” template that is opened from the right-hand actions pane, create a ...


1

You can use the Url Rewrite feature of IIS to do that : Open the URL Rewrite feature : Add a rule of type "Request blocking" : Block the requests based on host name : If you know your IP address, you can use it to block requests which use it : Or you can block all requests which are not using the domain name : Hope this helps (It took me ...



Top 50 recent answers are included