Archive for the 'IIS' Category

PFDAVAdmin, Exchange 2007 and .NET v.1.1 issue

PFDAVAadmin is still a great tool to manage public folders. It helps you do a lot of things "in bulk" that you would not easily be able to do otherwise (in a GUI). At least not as quickly and it works with Exchange 2000/2003/2007 even though it’s an old utility. However, on two different Exchange 2007 servers, I have received messages similar to this:

‘Could not expand https://localhost/exadmin/admin/mydomain.com/public%20folders/: name cannot begin with the ‘0′ character, hexadecimal value 0×30. Line 1, position 386′

I figured something was wrong with my public folder configuration, but thanks to a discussions on the web, I found that it relates to the .Net framework used by the utility. This message occurs if you do not have the Microsoft .NET Framework v1.1 installed on the server. (Exchange 2007 uses the v2.0 Framework).
Microsoft recommends using the PFDAVAdmin utility from a workstation, not from the console of the Exchange server, though. If you get this message, do NOT install the v1.1 Framework on an existing Exchange 2007 server. You run the risk of resetting some of the v2.0 Framework settings and, thus, breaking Exchange Server 2007!

So if you want to run PFDAVAdmin from the console of an Exchange 2007 server, you need to install the v1.1 .NET Framework prior to building Exchange.

Thanks to Jim McBee for highlighting this.

URL Rewrite Module 1.1 for IIS 7

URL rewrite module provides a rule-based rewriting mechanism for changing requested URL’s before they get processed by web server.

The Microsoft URL Rewrite Module 1.1 for IIS 7 provides flexible rules-based rewrite engine that can be used to perform broad spectrum of URL manipulation tasks, including, but not limited to:

  • Enabling user friendly and search engine friendly URL with dynamic web applications;
  • Rewriting URL’s based on HTTP headers and server variables;
  • Web site content handling;
  • Controlling access to web site content based on URL segments or request metadata.

Download details URL Rewrite Module 1.1 for IIS 7 (x86)

Download Details URL Rewrite Module 1.1 for IIS 7 (x64)

More info see IIS.net URL Rewrite.

URL Rewrite Module v2 – RC

The IIS Team has released a new version on the URL Rewrite Module, ver. 2.0 is now released as Release Candidate and available for download.

Microsoft URL Rewrite Module 2.0 for IIS 7 is an incremental release that includes all the features from version 1.1, and adds support for outbound response headers and content rewriting. More specifically, it can be used to:

  • Replace the URLs generated by a web application in the response HTML with a more user friendly and search engine friendly equivalent
  • Modify the links in the HTML markup generated by a web application behind a reverse proxy.
  • Fix up the content of any HTTP response by using regular expression pattern matching.
  • Modify HTTP request headers and IIS server variables.
  • Modify HTTP response headers

The URL Rewrite Module is a free module from Microsoft and is supported with IIS 7 and IIS 7.5.

Read more at IIS.net.

New module release: IIS Application Warm-Up

The IIS Team has release yet another cool module for IIS 7.

Have you ever hummed the Jeopardy theme song while waiting for a Web site to download – even on a high-speed Internet connection? Sometimes the problem is OUT of your control – whether it is an Internet traffic jam, scheduled maintenance, or some other unknown cause for a delay in receiving your request to view the latest on what the stock market is doing. But sometimes the problem is IN your control – such as pre-loading worker processes at the start of the Web server or when Overlapped Recycling occurs.

IIS Application Warm-Up for IIS 7.5 enables IT Professionals to improve the responsiveness of their Web sites by loading the Web applications before the first request arrives. By proactively loading and initializing all the dependencies such as database connections, compilation of ASP.NET code, and loading of modules, IT Professionals can ensure their Web sites are responsive at all times even if their Web sites use a custom request pipeline or if the Application Pool is recycled.

Features of the Application Warm-Up Module:

  • Integration with IIS Manager
  • Configuration settings are stored in the shared configuration file
  • Web application pre-loading settings can be configured on a per Web application basis, allowing IT professionals to identify or create individual initialization pages according to their needs.
  • Use the default or custom identities to pre-load the application.

I used to use a warm-up script by Joel Olesen, but this looks cool.

See more and download at: http://www.iis.net/extensions/ApplicationWarmUp

Fixes released for FTP vulnerabilities

Microsoft has released security bulletin MS09-053 that will address the FTP vulnerabilities that were publicly disclosed a couple of weeks ago. The information in this bulletin supercedes the previous advisory.

Web Deployment Tool Released

A few days ago the IIS Team released the final version of the Web Deployment Tool. The tool is the best (next best) since Microsoft AppCenter for handling web deployment.

The Web Deployment Tool simplifies migration, management and deployment of IIS Web servers, Web applications and Web sites.

The Web Deployment Tool simplifies the migration, management and deployment of IIS Web servers, Web applications and Web sites. Administrators can use command-line scripting with the Web Deployment Tool to synchronize IIS 6.0 and IIS 7.0 servers or to migrate an IIS 6.0 server to IIS 7.0. The Web Deployment Tool also enables administrators and delegated users to use IIS Manager to deploy ASP.NET and PHP applications to an IIS 7.0 server.

Features:

  • Migrate Web applications between IIS 6.0 and IIS 7.0 with ease
    Synchronize your server farm efficiently
    Package, archive and deploy Web applications more easily

Download: Web Deployment Tool (x86) & Web Deployment Tool (x64)

More information:

http://www.iis.net/extensions/WebDeploymentTool

http://misfitgeek.com/blog/web-deployment-tool-has-gone-rtw/

Windows Cache Extension for PHP – Public Beta Available

Yesterday the IIS Team released a cool new module for IIS 7.0, the first beta release of the Windows Cache Extension 1.0 for PHP.

The Windows Cache Extension for PHP is a PHP accelerator, that is used to increase the speed of PHP applications running on the Windows operating systems.

Any PHP application can take advantage of the functionality provided by the Windows Cache Extension for PHP without any code modifications. All that is required is that the extension is enabled and loaded by the PHP engine.

- The extension can only be used with non-thread-safe builds of PHP
- The extension can only be used when IIS is configured to run PHP via FastCGI
- The Windows Cache Extension 1.0 for PHP 5.3 can only be used with the x86 VC9 build of PHP 5.3.

Features:

- PHP opcode cache
- File cache
- Relative file path cache

Download information:

clip_image002

or, download:

Windows Cache Extension 1.0 for PHP 5.2 – Beta

Windows Cache Extension 1.0 for PHP 5.3 – Beta

For more information: IIS.net – Ruslan’s Blog

0-day vulnerability in IIS FTP confirmed

Microsoft has confirmed the 0-day vulnerability in IIS FTP Service that could allow for remote code execution and posted a Security Advisory.

In short it’s only the FTP service in IIS prior to IIS 7 and Windows 2008, here’s the full list of affected systems:

  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Services 5.1
  • Microsoft Internet Information Services 6.0

Microsoft is investigating new public reports of a vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0, Microsoft Internet Information Services (IIS) 5.1, and Microsoft Internet Information Services (IIS) 6.0. The vulnerability could allow remote code execution on affected systems that are running the FTP service and are connected to the Internet.

Read more in Microsoft Security Advisory (975191)