You need to edit the [DenyURLSequences] section of urlscan.ini - keep in
mind that these are in the urlscan.ini to prevent things like Code Red
and Nimda so do so at your own peril. I have been looking into a good
SMTP (and POP3 would be nice) gateway to try to catch stuff at the
perimeter so I can ease up the urlscan.ini a bit.

Jeff Hague

-----Original Message-----
From: Todd Raymond [mailto:[EMAIL PROTECTED]] 
Sent: Monday, September 30, 2002 2:34 PM
To: Exchange Discussions
Subject: RE: OWA and IIS do not like the ampersand "&" symbol

There is a urlscan.ini file that you edit accordingly. Very easy...

-Todd

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Tom.Gray
Sent: Monday, September 30, 2002 11:28 AM
To: Exchange Discussions
Subject: OWA and IIS do not like the ampersand "&" symbol

Well, in my continuing saga of upgrading from Exchange 5.5 to Exchange
2000 I have found yet another interesting snag.

Exchange 2000
Windows 2000 Server
IIS 5
Outlook Web Access

URLSCAN and IIS Lockdown tool applied to the OWA server  (using the OWA
template!)

If a user has a message with the ampersand ( & ) in the subject line and
tries to read that message using outlook web access, the user gets the
nasty "FILE NOT FOUND" error in their browser.  Why?

Because URLSCAN will reject the %26 character (which is the hex number
for that symbol)!

Yuck.

I'm sure there is a way to configure URLSCAN to let this one by, just
haven't gone to figure it out yet.  I'l let you know when/if I do.

Just thought y'all might want to know this.


Tom Gray, Network Engineer
All Kinds of Minds & The Center for Development and Learning
University of North Carolina at Chapel Hill
Internet:  [EMAIL PROTECTED]
AT&T Net: (919)960-8888



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to