Windows 2000 Tips and Tricks!

Tip
Subject Content

1
PROTECT AGAINST IIS ATTACKS IN WINDOWS 2000 WITH URLSCAN

Windows 2000 Professional includes IIS, which lets you host one Web

site. Windows 2000 Professional can only have (at most) 10 concurrent

connections, limiting the number of people who can connect to your Web site at

one time. IIS can still be useful to provide a different means for

accessing documents, printers, and other resources.



Regardless of whether your miniserver is accessible directly from the

Internet, you're still susceptible to certain IIS worms and other attacks.

These types of threats can come from a client connection to your

computer. If an infected client system on the LAN connects to your Web site, it

might infect your computer.



One way to protect your computer is to use Microsoft's URLScan tool.

URLScan scans the incoming requests to the IIS server and rejects those that

don't match a set of rules that you define. For example, URLScan can

filter based on URL length, character set, content, and other criteria.



Visit Microsoft's Web site for more information about URLScan.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/urlscan.asp

Page 1 of 237                                     Hit Counter
First Previous Next Last

Search this site powered by FreeFind