[KLUG Members] Re: IIS hacks needed.

Adam Bultman members@kalamazoolinux.org
Sat, 4 May 2002 11:04:41 -0400 (EDT)


Meh.  I wish.  The 'client' in question wants IIS, Coldfusion, and Oracle,
so it's out o' the question.

We aren't accepting 'exchange' traffic.  However, because of DNS people in
another country, we have two addresses for one server.  They point at
another address, so we had to bind an address to another one of our
servers, and bounce all http traffic to the actual IP address.  This
creates a problem.

We are a linux shop, but this is our only IIS server  that is going to
stick around.

<sigh>

-- 
Adam Bultman
adam@glaven.org
[ http://www.glaven.org ]


On 4 May 2002, Bryan J. Smith wrote:

> On Sat, 2002-05-04 at 01:31, Adam Bultman wrote:
> >
> > Okay. This sounds wierd, especially on a linux mailing list, but I'm
> > forced to run an IIS server.
>
> With Apache 2.0.35 out and running well on Windows, with the "stamp of
> approval" of Ziff-Davis, Gartner, and numerous others, with the
> unbelievable different in security between Apache and IIS, who-oh-who is
> "forcing" you to do this?  I'd tell them to shouve it, but I've always
> been a "hell raiser" at every company I've been at.  ;-P
>
> > Because of constraints, I have to accept relayed traffic. So, if someone
> > tries to hack the relay, I have to accept the traffic.
>
> Relayed traffic???  Are you talking Exchange?
>
> > well, I'm getting hammered.  http://www.glaven.org/images/hack.jpg
> > shows a bit of my traffic. I've blurred the host to save my identity,
> > but also be cool.
> > Regardless, I'm lookin' for IIS hacks so I can test if I'm getting
> > 'ownx0r3d' or not, and I can only find one, and it doesn't work (a
> > good sign??)
>
> Sorry, can't help you.  I think now is the time to push your Apache move
> with the "powers that be."
>
> -- Bryan
>
>