[KLUG Members] Re: IIS hacks needed.

Bryan J. Smith members@kalamazoolinux.org
04 May 2002 07:48:06 -0400


On Sat, 2002-05-04 at 01:31, Adam Bultman wrote:
> 
> Okay. This sounds wierd, especially on a linux mailing list, but I'm
> forced to run an IIS server.

With Apache 2.0.35 out and running well on Windows, with the "stamp of
approval" of Ziff-Davis, Gartner, and numerous others, with the
unbelievable different in security between Apache and IIS, who-oh-who is
"forcing" you to do this?  I'd tell them to shouve it, but I've always
been a "hell raiser" at every company I've been at.  ;-P

> Because of constraints, I have to accept relayed traffic. So, if someone
> tries to hack the relay, I have to accept the traffic.

Relayed traffic???  Are you talking Exchange?

> well, I'm getting hammered.  http://www.glaven.org/images/hack.jpg
> shows a bit of my traffic. I've blurred the host to save my identity,
> but also be cool.
> Regardless, I'm lookin' for IIS hacks so I can test if I'm getting
> 'ownx0r3d' or not, and I can only find one, and it doesn't work (a
> good sign??)

Sorry, can't help you.  I think now is the time to push your Apache move
with the "powers that be."

-- Bryan

-- 
Documented XML formats, never    Standards-based, pop-up free,
lose old files again, Office:     privacy-guaranteed browsing:
  http://www.openoffice.org          http://www.mozilla.org
--------------------------------------------------------------
Bryan J. Smith, SmithConcepts, Inc.  mailto:b.j.smith@ieee.org
Engineers and IT Professionals    http://www.SmithConcepts.com