rbollinger1212
asked on
IIS/ASP Questions...
Hello all -
I have this: Windows 2000 Server, running 5 seperate IIS based websites. NO FTP/SMTP.
I need to setup and install ASP on this server. I knwo that IIS comes out of the box with ASP installed and running. But in an attempt to furthut secure this server I removed the necessary ASP (filters,Drviers) or whatever there called from the "ISAPI filters section" of the WWW service master properties section in IIS Admin.
How can i fix that now? I need to run several ASP based scripts. using cdonts or cdosys.
Robert
ASKER
SO how do i readd that/those filters? just through the ISAPI window? How do i add a application mapping?
Assuming your versions are the same as mine...
For the .NET Filter it's:
Master WWW Properties
ISAPI Filters
Add
Filter Name: ASP.NET_1.1.4322.2032
Executable: C:\WINNT\Microsoft.NET\Fra
For the Application Mappings (if they're not there) it's:
Master WWW Properties
Home Directory
Configuration (under Application Settings)
Add
Executable: C:\WINNT\Microsoft.NET\Fra
Extension: .aspx
Limited to: GET,HEAD,POST,DEBUG
Script Engine - Ticked
Check File Exists - Not Ticked
Executable: C:\WINNT\System32\inetsrv\
Extension: .asp
Limited to: GET,HEAD,POST,TRACE
Script Engine - Ticked
Check File Exists - Not Ticked
ASKER
Ok SO i did that... and i am still getting the following error:
Microsoft VBScript runtime error '800a0030'
Error in loading DLL: 'GetObject'
/localstart.asp, line 18
THis is coming from IE.
If you have "show friendly http error messages" check in advanced settings of IE you get HTTP 500 Internal Server Error.
If you disabled "Show friendly http error messages" you get the above stated vbscript error.
I checked all the application mappings... and downloaded micorosft.net framework... I checked to see that the asp files were registered in the ISAPI section of the website proerties. in both master and site specific...
I installed WIndows Script package 5.6 which includes vbscript... no change.
I removed .asp .cer and 2 others from the "deny extensions" of the urlscan.ini file
I also installed the MDAC 2.8 Compnenets...
I also ran windows update... i mean what the hell right... besides windows can always be updated...
YEs, THe IIS lockdown tools has been installed and run... (originally i believe as a static website).
IF i uninstall IIS Lockdown tool am i going to loose all the site configurations that i currently have, meaning will i have to readd and resetup all the sites that have been added since the lockdown tool was installed?
What other options do i have?
Robert
Microsoft VBScript runtime error '800a0030'
Error in loading DLL: 'GetObject'
/localstart.asp, line 18
THis is coming from IE.
If you have "show friendly http error messages" check in advanced settings of IE you get HTTP 500 Internal Server Error.
If you disabled "Show friendly http error messages" you get the above stated vbscript error.
I checked all the application mappings... and downloaded micorosft.net framework... I checked to see that the asp files were registered in the ISAPI section of the website proerties. in both master and site specific...
I installed WIndows Script package 5.6 which includes vbscript... no change.
I removed .asp .cer and 2 others from the "deny extensions" of the urlscan.ini file
I also installed the MDAC 2.8 Compnenets...
I also ran windows update... i mean what the hell right... besides windows can always be updated...
YEs, THe IIS lockdown tools has been installed and run... (originally i believe as a static website).
IF i uninstall IIS Lockdown tool am i going to loose all the site configurations that i currently have, meaning will i have to readd and resetup all the sites that have been added since the lockdown tool was installed?
What other options do i have?
Robert
ASKER
o and i have tested another microsoft provided .asp page - same issue
ASKER
THis is the most recent URLscan log...
Could any of these things cause the problem as i ahve described?
[04-11-2005 - 15:32:13] -- Filter initialization time: [04-11-2005 - 15:32:13] --
[04-11-2005 - 15:32:13] ---------------- UrlScan.dll Initializing ----------------
[04-11-2005 - 15:32:13] UrlScan will return the following URL for rejected requests: "/<Rejected-By-UrlScan>"
[04-11-2005 - 15:32:13] URLs will be normalized before analysis.
[04-11-2005 - 15:32:13] URL normalization will be verified.
[04-11-2005 - 15:32:13] URLs must contain only ANSI characters.
[04-11-2005 - 15:32:13] URLs must not contain any dot except for the file extension.
[04-11-2005 - 15:32:13] Only the following verbs will be allowed (case sensitive):
[04-11-2005 - 15:32:13] 'GET'
[04-11-2005 - 15:32:13] 'HEAD'
[04-11-2005 - 15:32:13] 'POST'
[04-11-2005 - 15:32:13] Requests for following extensions will be rejected:
[04-11-2005 - 15:32:13] '.exe'
[04-11-2005 - 15:32:13] '.bat'
[04-11-2005 - 15:32:13] '.cmd'
[04-11-2005 - 15:32:13] '.com'
[04-11-2005 - 15:32:13] '.htr'
[04-11-2005 - 15:32:13] '.idc'
[04-11-2005 - 15:32:13] '.printer'
[04-11-2005 - 15:32:13] '.ini'
[04-11-2005 - 15:32:13] '.log'
[04-11-2005 - 15:32:13] '.pol'
[04-11-2005 - 15:32:13] '.dat'
[04-11-2005 - 15:32:13] Requests containing the following headers will be rejected:
[04-11-2005 - 15:32:13] 'translate:'
[04-11-2005 - 15:32:13] 'if:'
[04-11-2005 - 15:32:13] 'lock-token:'
[04-11-2005 - 15:32:13] Requests containing the following character sequences will be rejected:
[04-11-2005 - 15:32:13] '..'
[04-11-2005 - 15:32:13] './'
[04-11-2005 - 15:32:13] '\'
[04-11-2005 - 15:32:13] ':'
[04-11-2005 - 15:32:13] '%'
[04-11-2005 - 15:32:13] '&'
What do you think?
Could any of these things cause the problem as i ahve described?
[04-11-2005 - 15:32:13] -- Filter initialization time: [04-11-2005 - 15:32:13] --
[04-11-2005 - 15:32:13] ---------------- UrlScan.dll Initializing ----------------
[04-11-2005 - 15:32:13] UrlScan will return the following URL for rejected requests: "/<Rejected-By-UrlScan>"
[04-11-2005 - 15:32:13] URLs will be normalized before analysis.
[04-11-2005 - 15:32:13] URL normalization will be verified.
[04-11-2005 - 15:32:13] URLs must contain only ANSI characters.
[04-11-2005 - 15:32:13] URLs must not contain any dot except for the file extension.
[04-11-2005 - 15:32:13] Only the following verbs will be allowed (case sensitive):
[04-11-2005 - 15:32:13] 'GET'
[04-11-2005 - 15:32:13] 'HEAD'
[04-11-2005 - 15:32:13] 'POST'
[04-11-2005 - 15:32:13] Requests for following extensions will be rejected:
[04-11-2005 - 15:32:13] '.exe'
[04-11-2005 - 15:32:13] '.bat'
[04-11-2005 - 15:32:13] '.cmd'
[04-11-2005 - 15:32:13] '.com'
[04-11-2005 - 15:32:13] '.htr'
[04-11-2005 - 15:32:13] '.idc'
[04-11-2005 - 15:32:13] '.printer'
[04-11-2005 - 15:32:13] '.ini'
[04-11-2005 - 15:32:13] '.log'
[04-11-2005 - 15:32:13] '.pol'
[04-11-2005 - 15:32:13] '.dat'
[04-11-2005 - 15:32:13] Requests containing the following headers will be rejected:
[04-11-2005 - 15:32:13] 'translate:'
[04-11-2005 - 15:32:13] 'if:'
[04-11-2005 - 15:32:13] 'lock-token:'
[04-11-2005 - 15:32:13] Requests containing the following character sequences will be rejected:
[04-11-2005 - 15:32:13] '..'
[04-11-2005 - 15:32:13] './'
[04-11-2005 - 15:32:13] '\'
[04-11-2005 - 15:32:13] ':'
[04-11-2005 - 15:32:13] '%'
[04-11-2005 - 15:32:13] '&'
What do you think?
It doesn't look like URLScan is blocking anything - it's generally good about logging what it does block.
You may want to check the IIS logs for the site for Internal Server Errors (500 Error Code) in addition to the Event Log.
It may be worth trying to reinstall the .NET Framework on the server to see if that has any impact.
Could you also post what object the ASP script is being asked to get in each case?
ASKER
yes i am running the default localstar.asp (microsoft script). i have tried the other microsoft script.
i have also tried another script employing the use cdonts or cdosys for setting script based e-mailing... however i get the same error on all scripts.
Yesterday when i installed the.net framework that was the first time it had been installed... do i need to reapply the service pack like you used to have to do in the old days....?
Could this be a permission issue?
I will check the IIS logs and see whats going on... should i look for anything specific.... ?
Robert
i have also tried another script employing the use cdonts or cdosys for setting script based e-mailing... however i get the same error on all scripts.
Yesterday when i installed the.net framework that was the first time it had been installed... do i need to reapply the service pack like you used to have to do in the old days....?
Could this be a permission issue?
I will check the IIS logs and see whats going on... should i look for anything specific.... ?
Robert
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Hi Robert,
The default location for the ASP.NET ISAPI Filter (ASP.NET_1.1.4322.2032 - .NET Framework) is:
C:\WINNT\Microsoft.NET\Fra
By default this is set as Low Priority. You should be able to add a new filter based on that.
Standard ASP does not install as an ISAPI Filter, but as a Application Mapping. So if you need those too...
Application Mapping for .aspx is:
C:\WINNT\Microsoft.NET\Fra
Limited to: GET,HEAD,POST,DEBUG
Application Mapping for .asp is:
C:\WINNT\System32\inetsrv\
Limited to: GET,HEAD,POST,TRACE
HTH
Chris