Re: IIS and URLScan

2008-05-01 Thread Don Lindsay
Hello; If your site is using a deep packet inspection tool, you can disable this without worring about opening any SQL Injection issues. Installing IIS any any database on the same server is begging for trouble, a web server should be just that, a web server and nothing else. Deep pack

Re: IIS and URLScan

2008-05-01 Thread Rams
On May 1, 2008, at 1:49 AM, Don Lindsay wrote: I ran into an issue on a deployed application. IIS has a tool called URLScan, which refuses URLs that could exploit security flaws in IIS server. I have a tomcat 5 instance running a Web Objects 5.4.2 application, connecting to IIS using the

IIS and URLScan

2008-04-30 Thread Don Lindsay
Hello; I ran into an issue on a deployed application. IIS has a tool called URLScan, which refuses URLs that could exploit security flaws in IIS server. I have a tomcat 5 instance running a Web Objects 5.4.2 application, connecting to IIS using the JK connector. When running the applic