Recent content by LenLindquist

Having parent paths enabled is generally recognized as a poor practice from an information security perspective, as is navigating to parent paths in your code as a programmer. The reason is that if you happen to install a rogue script that decides to navigate to your root directory and delete...

A custom-written ASP script could accomplish this fairly well. If you do some searching on free script sites, you're likely to find several example pieces of code that do something very similar to what you are seeking. The script would not be very complex. Len

I am investigating SPAM detection/interception/removal software for IIS. Does anyone have any experience with this that could offer some suggestions? I would really like to eliminate known open relays instead of doing content-based detection. I'm aware of vamsoft and GFI MailEssentials, but...

Best check ORDB.org and see if you're listed as an open relay. If so, you can resubmit your site so they'll remove you. Len

Stopping and starting the service should do the job. Make sure you're getting a fresh copy by pressing Control and clicking refresh. If none of this works, I'd start to wonder if you're editing the wrong file. After you've eliminated that possibility, investigate/(temporarily) eliminate the...

Another possibility is, the IUSER_server name account needs to be able to read the file. If you've played with file permissions, this could be the problem. Len

A couple things to add. First, even if your ISP blocks port 80, you can typically host it on another port of your choice by configuring your "entry" on your chosen Web-based dynamic address tracker. Second, there is no need to needlessly put your server/computer at risk by placing it...

You could start by running MBSA (Microsoft Baseline Security Analyzer) on the machine. It should enumerate its known weaknesses and list any patches you need to install. You can do a search on technet.microsoft.com and you'll find it. Len

There is plenty of information online about setting up ftp servers. Passive transfer is an ftp client option. The ftp server is configured by default to allow administrators (e.g., "administrator") to access it and basically no one else. You have to give the connecting account...

An SMTP listener can be configured to send and receive e-mail. In a typical Microsoft Environment, Exchange Server is usually used to accomplish this, though, and it is rarely located on the same server that serves as "the Web server." To verify that your SMTP listener is working...

On the server, there is a designation concerning which page names represent valid "default" documents. Usually, this list contains such page names as default.htm, default.html, index.htm, index.html, index.asp, default.asp, etc., etc. Could it be that you're just calling up the page...

You'll definitely want a static IP address. If you have a dynamically-assigned address, you'll be getting very frustrated when the machine is assigned a new address and you can't connect. Only one NIC is necessary and you can take multiple IP addresses without adding additional NICs. Since...

Have you verified that the SMTP listener is working by connecting via telnet on port 25 and sending a sample mailing? If so, is it processed as expected? This doesn't answer your question specifically, of course, but does narrow it down a bit. Len

From another machine on your network, ping the server using both addresses. You'll likely find that the one that isn't working is either unreachable or pointing to a different address. In either case, you'll need to modify your internal DNS. Len

I would like to use a select-option drop-down box to select a library name from a data table and then, on the same form without yet submitting, dynamically change the next drop-down box to list the staff working at that particular library from another data table. I figure this will at least...