11,660 reputation
21839
bio website weblogs.asp.net/owscott
location North Carolina
age 38
visits member for 5 years, 4 months
seen Dec 18 at 0:25

Co-founder and Chief Systems Architect of Vaasnet (www.vaasnet.com). Microsoft MVP for ASP.NET. ASPInsider. Strengths are IIS, URL Rewrite, ASP.NET, DNS, Hyper-V, Windows Server and SQL Server.


Jul
18
comment Where is ASP.NET Server Log File is Located?
@Zafar. Error status codes are logged (e.g. 500) but that only tells you that an error occured. It doesn't provide further info. Details would need to be found in Event Viewer. Consider an error logging framework like ELHAM or Log2Net for the best error logging and notifications.
Jan
31
comment Dynamically remove iptables policy by IP address
That is it exactly! I also had to add IFS=$'\n'; to the beginning, I assume because my command shell default splits by spaces instead of line breaks. I do have the risk of race conditions so that and being fast make this the perfect solution.
Jan
31
comment Dynamically remove iptables policy by IP address
Thanks so much @ricksebak.
Jan
30
comment Dynamically remove iptables policy by IP address
That looks perfect. I just need to learn the syntax to auto-generate the command using awk so that I can actually carry out the delete in the same command. Your example actually gets the rule numbers which is just what I need. I'm heading into a meeting but I'll research that next.
Jan
23
comment IPTables and SNAT for just two ports
That did it! I dropped the port and everything appears to work perfectly. You're right, the ping itself didn't work, although it still let me know if it would resolve DNS. I also added a policy for ICMP and even that is working now.
Jan
23
comment IPTables and SNAT for just two ports
Thanks, that's exactly what I was looking for. It almost works, but something isn't quite working. I realize that I need DNS access too for a functioning web browsing machine, so I added ports 53 for TCP and UDP. (see my update on my original question) RDP is now blocked, so that's good, but pinging a new DNS name sometimes works and sometimes doesn't. What would cause that to be intermittent? Would it have something to do with udp and tcp using the same destination port?
Jan
23
comment IPTables and SNAT for just two ports
@pepoluan, I've added the rules now, and I'll reply with more details to zoredache.
Nov
22
comment Will changing applicationHost.config cause IIS7 restart?
@mcintyre321 Correct. A host header change won't cause an AppDomain recycle.
Jul
19
comment Why is it called DNS “Propagation”?
Thanks bortzmeyer and Sandman4. You're correct, it's not the 13 root servers that are updated, but rather than name servers of the TLD. I updated my post to correct that.
Jun
24
comment How to assign permissions to ApplicationPoolIdentity account
@ciaran Bruen. You're right, that is required often in a domain environment. I'll make a note of it in the post above. Thanks for mentioning.
Feb
26
comment ASP.net user account permissions in IIS 7 on Windows 2008 server
Thanks for the update Rory. I updated the post to mention IIS 7.5 and later, which didn't exist when this was first written. The app pool identity is available in IIS 7 too but only from the command line.
Dec
10
comment IIS 7: launch unique site instance per host name
If the not-yet-initialized sites are caught with a catch-all site that is devoted to the single purpose of creating the initialized sites, then you have a good secure situation. The new sites that are created would run with minimal permissions and would be locked down properly.
Dec
7
comment IIS 7: launch unique site instance per host name
I think I understand more now. The 'code' is the same, but you have a unique connection string or configuration file for each instance. If that's the case and you can't easily edit the legacy app to dynamically generate the connection string based on the host name, then the solution to auto-generate the sites may be your best bet.
Dec
5
comment IIS 7: launch unique site instance per host name
I can explain the last 3 paragraphs in more depth, but first I would like to confirm that you indeed need unique sites if they are identical in every way.
Dec
5
comment IIS 7: launch unique site instance per host name
@OlduwanSteve. If you're using the host name, why do you need multiple sites? The host name is always available to the site even if multiple visitors using multiple host names share the same site. Wouldn't a single site do the trick? Using a single site would be desirable for many reasons, unless I'm overlooking something.
Nov
12
comment IIS 7 - 401.2 error by hostname but not by IP address
@Ian, I just checked in on this now and see that you've tracked it down. Nice troubleshooting. Thanks for providing a detailed answer on what it was.
Nov
4
comment How to create a catch-all subdomain in IIS 7.5?
@iamserious, a 4th level domain functions just the same as any other domain in IIS. If it doesn't work, my guess is that the DNS entry needs to be setup. Try pinging it to ensure that it resolves to the server. The bindings will work the same no matter how many levels the FQDN has.
Oct
4
comment Installing .NET application on IIS 7.5 issues
Hi Juw. That would do it. Excellent, glad you were able to track it down.
Oct
3
comment Installing .NET application on IIS 7.5 issues
That's a 404.2 error code which suggests that it's something with the ISAPI settings: forums.iis.net/t/1160971.aspx. What's the substatus code for the 500 error back in Integrated mode? Also, testing with a test.aspx page is worth doing early on too.
Aug
29
comment How to manipulate default document with rewrite module on IIS7?
@gooze. Yes, if you select the Clear All then you can add them back again in the order you want. It won't affect the global doc settings, but it means that the global defaults won't be used, and you'll have the default docs explicitly defined (which isn't a problem since you're making at least one change anyway)