>From the error you list, you might have bad code on the server that is causing this crash. Do you have any COM objects or such that may be causing access errors or fatal exceptions? These kinds of errors cause IIS to crash....
If you really want to find the source, check out this process.... Microsoft Knowledge Base Article - Q286350 HOWTO: Use Autodump+ to Troubleshoot "Hangs" and "Crashes" http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q286350 John M Stover II [EMAIL PROTECTED] -----Original Message----- From: Alex Hubner [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 01, 2002 10:59 AM To: CF-Talk Subject: OT: IIS buffer overflow? Hi Folks, sorry for the OT but I really cant find a answer for what is happening to my IIS server. Maybe you can help me on that annoying thing. Everyday, at least one time, my IIS crashes and turn back working... The message I found on EventViewer is: Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7031 Date: 28/7/2002 Time: 18:43:59 User: N/A Computer: XINGU Description: The World Wide Web Publishing Service service terminated unexpectedly. It has done this 15 time(s). The following corrective action will be taken in 0 milliseconds: No action. I take the same for the FTP service, IIS Admin Service (at the same time - IIS Admin Service seems to occur first). Well, this error is notorious by it's relation to the buffer overflow atacks in the IIS such as nimda e so on. My server is running URLScan tool (2.5), I have all patches that MS could imagine regarding security in both server and the iis service, I disabled all app mappings (except the .cfm), removed all risk folders, tunned my regisrty entires to a more robust response to DoS attacks, my server runs under a very good hardware-based firewall, my cf apps are safe in terms of coding, etc, etc. Well, security cares are not a problem here since I do follow ALL Microsoft recommendations regarding it. I really don't know what can causes it under such circumstances. I've tried to contact M$ support but seems that IIS support must be payed... (it's not included when you buy your Win2k server). Not sure if this can cause problems to the IIS but I run my administrative pages (IIS remote administrative, CFAdministrator and so on) in a high port (eg. 8711) under SSL encrypt... (also protecting contents for anonymous access). I also run SFTP under port 22 (but I don't think this is related to that since the SSH ftp uses it's own ftp server machine). Any clues?? Thanks a lot! Alex ______________________________________________________________________ Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
