RE: IIS stopping without reason

[Decker, Jeff]

Title: Message

Read these two articles.

http://www.theregister.co.uk/content/4/21019.html

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-044.asp

 

The new patch from MS should solve your problem.

-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:39 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason

DO IT!!!!

Don't pass go, don't collect 200, don't ask anyone's permission.

I would say for the responses to your question that the answer is self evident.

-----Original Message-----
From: Eric Peeters [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 1:37 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason

Well, I have been hinting at my boss that patching *should* solve the problem, however I don't know that for a fact, I am just *hoping* it will and again *hoping* I will be able to patch it. Otherwise, it may end up as a case of "oooppssss wrong files, sorry, server got accidentally patched..."

Eric Peeters
Network Administrator
TexLoc Ltd

-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:31 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason

In this case, screw the higher ups. They have no clue, and they will have no clue if you patch it either. Just because someone is above you does not have to mean you put up with sheer idiocy.
Patch it NOW.

-----Original Message-----
From: Erik Sojka [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 1:25 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason

Perhaps another internal box is infected.  Is there anything from the IIS logs from the times when the box goes belly up?

-----Original Message-----
From: Eric Peeters [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:24 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason

It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail.

Eric Peeters
Network Administrator
TexLoc Ltd

-----Original Message-----
From: Kevin Lundy [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:06 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason

The "no patch" is the clue.  My betting money is on Code Red - you have heard the news the past month?

-----Original Message-----
From: Eric Peeters [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:09 PM
To: NT System Admin Issues
Subject: IIS stopping without reason

Hello,

My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ?

Eric Peeters
Network Administrator
TexLoc Ltd

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm