Hot answers tagged iis
5
First off, 128-bit AES is very good. The prevailing opinion is that it is secure for the future close enough to care about.
Setting that aside, the reason you're getting 128-bit encryption is because that was what was negotiated. The certificate has little to do with it; the SSL cert is an RSA keypair, and there's no way that's only 128 bits. It's more ...
5
Look here for a few suggestions. By default it isn't possible, but since the files for IIS 6 are inside Service Pack 3 (for Windows Server 2003) you can extract them (see the link for instructions how to do that).
You could also look at IIS Express.
4
From How to change the TCP port for IIS services
Open Internet Information Services (IIS) Manager.
Select the Web site that you wish to configure.
In the Action pane, click Bindings.
Click Add to add a new site binding, or click Edit to change an existing binding.
Click OK to apply the changes.
4
Your robots.txt file does not appear to conform to the robots.txt specification (you must specify the user agent before the directives and I do not believe that Noindex is a valid directive).
Consider the following updates:
User-agent: googlebot
Disallow: /Office/LocationDetails.aspx
Disallow: /office/default.aspx
Disallow: /Electronics/Communitylist.aspx
...
3
The AddType directive lets you specify what MIME type(not entirely a complete list) a given file extension should be processed as. To make an arbitrary extension be processed as HTML:
AddType text/html .whatever
Note that there's generally very little reason to do this sort of thing, and it mostly just introduces maintenance work.
3
There are lots of bots (computer programs) that visit webpages. However, they pretend to be real users by using the user agent of a popular browser, such as IE or firefox or chrome; instead of using their own specialized user agent so the server knows they aren't real people. As a result, the IIS logs count them as real users. Google Analytics doesn't, ...
3
I think you have to enable https in IIS itself. The following links will help
http://support.microsoft.com/?id=324069
http://support.microsoft.com/?id=298805
3
Have a look a godaddy's support article on nameservers (though this isn't clear on what you're supposed to do with domains registered with them and hosted with them).
The information they have given you isn't correct, pinging ns1.asezo.com returns nothing, so there isn't a nameserver there. I would suggest calling support back.
3
It became known in 2009 that IIS had a vulnerability in that it determined filetype by the part of the filename preceeding a semicolon if there was one in the name.
See this NIST description for more details.
3
No, you don't need to specify a DNS server on your PC, but you need to register a dynamic DNS entry for your domain, that points to the IP of your PC/network.
Please remember that most internet service provider do have private and commerial contracts, where the upload speed for private internet connections it limited in most cases. Most providers even ...
2
From the previous times I have used it, I don't recall being prompted for a restart (although I usually install manually). The best way to verify this would be to setup a dev server and test it. This should be standard procedure before doing anything in a production environment, especially if you are concerned with downtime.
Measure twice...cut once.
2
It doesn't look like it is required but is recommended.
Best Practices for Using Web PI
Follow these best practices to prevent
errors or installation issues when
using the Web PI.
Close all programs and restart your
computer.
The Web PI functions by running the
setup for the selected applications
one after the other, as in a ...
2
If anyone is curious I resolved this problem with the following syntax:
<rule name="NoSSL - folder" enabled="true" stopProcessing="true">
<match url="^nossl/.*" />
<conditions logicalGrouping="MatchAll" trackAllCaptures="false">
</conditions>
<action type="None" />
</rule>
<rule name="Redirect to HTTPS" ...
2
You say that this affects Excel files that are generated by your application. What about straight-up downloads? Try sticking an Excel file into your webroot manually, then downloading it. Does that come down OK?
The first thing I check when I have "file type x won't download" issues is MIME types. Could something have changed when the SSL certificate was ...
2
To answer my own question, the problem was with how Internet Explorer handles compatibility mode on intranet sites.
Even though my web.config and my HTML code specified to always set IE=Edge (most recent rendering engine), the Internet Explorer browser itself has ultimate control over the rendering, and its default is to have intranet sites rendered in ...
2
What is the request URI for the CSS file? Firefox will not cache the result when the URI contains a query string (i.e. a ? followed by parameters).
According to the HTTP specifications, a browser should never cache a response from a request containing a query string unless the server explicitly allows it. Unfortunately though, Firefox and IE do not comply ...
2
If you run the site entirely under SSL now, you can open up the the non-SSL site for anonymous visitors and then redirect all visitors to the SSL site. This way visitors are not required to authenticate against the non-SSL version and only to the SSL site.
The easiest way to do this without to much changes to your current setup is to create an extra site ...
2
In the comments is was mentioned that this could be done by whitelisting google's user agent. This is a bad idea: lots of bots can impersonate it, and then will be able to dos your site.
Looking at the feature list of this script, it seems that it uses two criteria to determine whether it's a dos attack:
The number of concurrent requests.
The ...
2
Scott Forsyth - MVP's answer to 'Different file locations for http v https on IIS?' suggests that you look at Failed Request Tracing to help identify the fault, I'd also suggest checking the IIS logs to see exactly what is happening to the request for default.aspx, it must be going somewhere!
2
According to this knowledge base article, MatrixStats is owned by FastHosts.co.uk and is available only to their customers.
You could use Google Analytics, or try one of the following programs:
IIS Log Analyzer
Weblog Expert
Easy AWstats for IIS instructions
2
Usually, the basic authentication user name is placed into apache logs by default. From http://httpd.apache.org/docs/1.3/logs.html a typical log configuration is
LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog logs/access_log common
Where %u is the user name.
I'm not very familiar with iis, but it appears that the basic authentication user ...
1
You would be better off creating a sub-domain e.g. blog.example.com and pointing the A-Records(AAAA-Records for IPV6 addresses) for that sub-domain to the secondary server.
Your hosting company's support site should be able to to tell you how to accomplish this, but if you can tell us the name of your host, or if you have access to cPanel or Plesk we might ...
1
If you think it's the proxy, get the proxy admin to look at the logs for some of the failed requests, and compare them with a working request.
It's possible the proxy's been configured to look for certain content and when it finds it, it dumps it.
You mentioned that doing something on the client fixed it though (clearing cache files), so that implies it ...
1
Even if you are not using ASP.NET web forms you can use ASP.NET Web Forms authentication as the site is hosted by IIS.
If your web.config you can specify directories that require authentication, and can scope that authentication to whatever users or groups you want:
<configuration>
<system.web>
<authentication mode="Forms" >
...
1
I wouldn't expect websites consisting of a single page to be given much weight by Google, so I doubt creating links from the extra domains would have much of an effect SEO-wise (unless those domains offer significant content of their own).
Permanent (301) redirects will confer some SEO ranking from the origin site to the destination.
You can set up ...
1
Remove the etag header
Use the Cache-Control header to have a large max-age value
Set the Expires header to be a far future date
I am unsure how to do this with IIS but if you do the above Firefox should cache your images and any other files you wish to have cached.
1
First you must register your domainname with a suitable registrar.
As part of this the IP addresses of 2 computers that will serve as "DNS servers" are required. Many registrars provide these servers as part of the service.
Next the "DNS zone files" on those "DNS Servers" need to be updated to include a reference that basically says "www.mydomain.com is at ...
1
How a website responds in IIS (any version) largely depends on how you setup the website. That statement (and the answer that follows) is also true for other web servers such as Apache. There are three primary "keys" that identify a website in IIS:
IP address
Port
Host headers
Consider the following example:
DNS 'A' record for www.yourwebsite.com ...
1
It takes a while for Google and the other search engines to notice pages have moved and adjust their indexes accordingly. It definitely does not happen quickly much less overnight. So even though you have set up redirects those old pages will still show in the SERPs for a little while. Fortunately when a user clicks on the search results they will be taken ...
1
Server Variables are variables that IIS sets and provides to your application and are relative to the HTTP request and response. They are an accumlation of information based on HTTP headers, IP connections, authentication, authorization, etc.
An example of using a rewrite rule with Server Variables could be to provide the original URL of your resource ...
Only top voted, non community-wiki answers of a minimum length are eligible
