Skip to main content

URLScan Error: The Web Server Has Been Locked Down and Is Blocking the DEBUG Verb

Today I installed URLScan 2.5 and experienced following error: “The Web Server Has Been Locked Down and Is Blocking the DEBUG Verb” while I tried to debug my project. I tried several thing apart from restarting my IIS, but nothing worked !

" UrlScan version 2.5 is a security tool that restricts the types of HTTP requests that Internet Information Services (IIS) will process. By blocking specific HTTP requests, the UrlScan security tool helps prevent potentially harmful requests from reaching the server. UrlScan 2.5 will now install as a clean installation on servers running IIS 4.0 and later."

Then I tried developers' best friend yes, Google! , and I got the solution from microsoft site.



--------------------------------------------------------------------------------
To enable debugging on a Web server with URLScan installed

1.Locate the Urlscan.ini file. Normally, you will find it in a directory that looks something like this:
%windir%\System32\Inetsrv\urlscan2.Create a copy of the file and name it Urlscan.old.
3.Open the original copy of the Urlscan.ini file using Notepad or the text editor of your choice.
4.In Urlscan.ini, locate the [AllowVerbs] section. Add DEBUG to the [AllowVerbs] section. If you see ;DEBUG in the [AllowVerbs] section, you can remove the semicolon (which comments out the verb).
5.Locate the [DenyVerbs] section. If DEBUG appears in the [DenyVerbs] section, remove it.
6.Save the file.
7.Restart the server or restart IIS.

Source:
http://geekswithblogs.net/ram/archive/2006/02/28/70937.aspx
http://msdn.microsoft.com/en-us/library/6ax8x46y(VS.71).aspx
http://technet.microsoft.com/en-us/security/cc242650.aspx
Labels:

Comments

Post a Comment

Popular posts from this blog

MYSQL TO MSSQL

Aduss berpeluh2 hampir 3 minggu cari solution utk convert db mysql to mssql. mula2 aku pakai phpmyadmin untuk generate sqldump. then aku terai import masuk ke mssql gunakan new query. rupa2nya phpmyadmin ni pon bengong. dia tak create ikut mssql punya format syntac, dia generate ikut kepala dia saja walaupun aku dah klik checkbox pada OPTION MSSQL format. patut le mssql tak mau terima, even barus yg paling mudah skali iaitu komen pon phpmyadmin tak tukar!!! ade ke format komen mssql si phpmyadmin masih pakai "--" (dash dash). mssql pakai syntax "/*" utk buka blok komen dan "*/" utk tutup blok komen. adusss.  banyak plak tu dalam sqldump aku nak kena tukar.. lemau aku. 160MB punya textfile. gilo apo nak ubah satu persatu baris.. berjuta baris woo.. 8 tahun pon tak siap nak ubah. tapi ada satu software boleh buat semua tu secara auto. SQL2MSS. aku cuma pakai demo set je. dia boleh sedut semua structure, tapi rekod cuma dapat 5 per table. jadi la 5 re...
1 comment
Read more

Microsoft Virtual PC: XP Mode, RPC is unavailable

hi, korang penah kene ke error diatas? bila bukak ms virtual pc. tetiba je masa nak start je XP Mode, :RPC is unavailable". pehh pening pala aku nak solve. lama2 boleh tumbuh uban woo. aku cuba buat macam ni je. 1. korang bukak ms virtual pc. 2. utk vpc yang sedia ada tu.. korang delete file dalam list tu. tapi pastikan fail tu hanya fail *.vmc atau *.vmcx je. kalau korang delete fail *.vhd, lingkup semua nanti.. hahahahaha hati2 aa 3. create semula dengan cara create baru ms vpc tu atau copy & paste dari yg lama. 4. kalau copy paste yg lama, may be tak jalan bila start, so modify sket path file *.vhd dalam setting tu. 5. cuba start. kalau ada pa pe, cuba rujuk link dibawah. may be berkesan jugak. until then, cherrio. sumber: http://social.technet.microsoft.com/Forums/en-US/w7itprovirt/thread/4765d915-cbe4-4629-aa3b-cba9efbb29b5/
1 comment
Read more

RSA Privatekey

Seminggu pening aku dengan kaedah nak jana RSA privatekey/CSR/certificate guna OpenSSL atas web. sebelum ni aku pakai buat manual je.  kena bukak console/command prompt. akan jadi leceh bila ko berada jauh dari comp yang ada remote desktop. snippet (saja aku kasi tak lengkap supaya korang pikir bior jalan otak sket) ni utk nak jana RSA privatekey. tapi aku pakai OpenSSL.NET la. var iKeySize = int.Parse(ddl_ec_RSAPrivateKeyKeySize.SelectedValue); BigNumber bn = 0x10001; using (var rsa = new OpenSSL.Crypto.RSA()) { rsa.GenerateKeys(iKeySize, bn, null, null); txt_ec_RSAPrivateKey.Text = rsa.PrivateKeyAsPEM; }
Post a Comment
Read more