Link to home
Start Free TrialLog in
Avatar of rbollinger1212
rbollinger1212

asked on

IIS/ASP Questions...


Hello all -


I have this: Windows 2000 Server, running 5 seperate IIS based websites. NO FTP/SMTP.

I need to setup and install ASP on this server. I knwo that IIS comes out of the box with ASP installed and running. But in an attempt to furthut secure this server I removed the necessary ASP (filters,Drviers) or whatever there called from the "ISAPI filters section" of the WWW service master properties section in IIS Admin.


How can i fix that now? I need to run several ASP based scripts. using cdonts or cdosys.

Robert
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image


Hi Robert,

The default location for the ASP.NET ISAPI Filter (ASP.NET_1.1.4322.2032 - .NET Framework) is:

C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

By default this is set as Low Priority. You should be able to add a new filter based on that.

Standard ASP does not install as an ISAPI Filter, but as a Application Mapping. So if you need those too...

Application Mapping for .aspx is:

C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
Limited to: GET,HEAD,POST,DEBUG

Application Mapping for .asp is:

C:\WINNT\System32\inetsrv\asp.dll
Limited to: GET,HEAD,POST,TRACE

HTH

Chris
Avatar of rbollinger1212
rbollinger1212

ASKER

SO how do i readd that/those filters? just through the ISAPI window? How do i add a application mapping?

Assuming your versions are the same as mine...

For the .NET Filter it's:

Master WWW Properties
ISAPI Filters
Add

Filter Name: ASP.NET_1.1.4322.2032
Executable: C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

For the Application Mappings (if they're not there) it's:

Master WWW Properties
Home Directory
Configuration (under Application Settings)
Add

Executable: C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
Extension: .aspx
Limited to: GET,HEAD,POST,DEBUG
Script Engine - Ticked
Check File Exists - Not Ticked

Executable: C:\WINNT\System32\inetsrv\asp.dll
Extension: .asp
Limited to: GET,HEAD,POST,TRACE
Script Engine - Ticked
Check File Exists - Not Ticked

Ok SO i did that... and i am still getting the following error:



Microsoft VBScript runtime error '800a0030'

Error in loading DLL: 'GetObject'

/localstart.asp, line 18


THis is coming from IE.

If you have "show friendly http error messages" check in advanced settings of IE you get HTTP 500 Internal Server Error.

If you disabled "Show friendly http error messages" you get the above stated vbscript error.

I checked all the application mappings... and downloaded micorosft.net framework... I checked to see that the asp files were registered in the ISAPI section of the website proerties. in both master and site specific...

I installed WIndows Script package 5.6 which includes vbscript... no change.

I removed .asp .cer and 2 others from the "deny extensions" of the urlscan.ini file

I also installed the MDAC 2.8 Compnenets...

I also ran windows update... i mean what the hell right... besides windows can always be updated...

YEs, THe IIS lockdown tools has been installed and run... (originally i believe as a static website).

IF i uninstall IIS Lockdown tool am i going to loose all the site configurations that i currently have, meaning will i have to readd and resetup all the sites that have been added since the lockdown tool was installed?

What other options do i have?

Robert
o and i have tested another microsoft provided .asp page - same issue
THis is the most recent URLscan log...

Could any of these things cause the problem as i ahve described?

[04-11-2005 - 15:32:13] -- Filter initialization time: [04-11-2005 - 15:32:13]  --
[04-11-2005 - 15:32:13] ---------------- UrlScan.dll Initializing ----------------
[04-11-2005 - 15:32:13] UrlScan will return the following URL for rejected requests: "/<Rejected-By-UrlScan>"
[04-11-2005 - 15:32:13] URLs will be normalized before analysis.
[04-11-2005 - 15:32:13] URL normalization will be verified.
[04-11-2005 - 15:32:13] URLs must contain only ANSI characters.
[04-11-2005 - 15:32:13] URLs must not contain any dot except for the file extension.
[04-11-2005 - 15:32:13] Only the following verbs will be allowed (case sensitive):
[04-11-2005 - 15:32:13]       'GET'
[04-11-2005 - 15:32:13]       'HEAD'
[04-11-2005 - 15:32:13]       'POST'
[04-11-2005 - 15:32:13] Requests for following extensions will be rejected:
[04-11-2005 - 15:32:13]       '.exe'
[04-11-2005 - 15:32:13]       '.bat'
[04-11-2005 - 15:32:13]       '.cmd'
[04-11-2005 - 15:32:13]       '.com'
[04-11-2005 - 15:32:13]       '.htr'
[04-11-2005 - 15:32:13]       '.idc'
[04-11-2005 - 15:32:13]       '.printer'
[04-11-2005 - 15:32:13]       '.ini'
[04-11-2005 - 15:32:13]       '.log'
[04-11-2005 - 15:32:13]       '.pol'
[04-11-2005 - 15:32:13]       '.dat'
[04-11-2005 - 15:32:13] Requests containing the following headers will be rejected:
[04-11-2005 - 15:32:13]       'translate:'
[04-11-2005 - 15:32:13]       'if:'
[04-11-2005 - 15:32:13]       'lock-token:'
[04-11-2005 - 15:32:13] Requests containing the following character sequences will be rejected:
[04-11-2005 - 15:32:13]       '..'
[04-11-2005 - 15:32:13]       './'
[04-11-2005 - 15:32:13]       '\'
[04-11-2005 - 15:32:13]       ':'
[04-11-2005 - 15:32:13]       '%'
[04-11-2005 - 15:32:13]       '&'


What do you think?

It doesn't look like URLScan is blocking anything - it's generally good about logging what it does block.

You may want to check the IIS logs for the site for Internal Server Errors (500 Error Code) in addition to the Event Log.

It may be worth trying to reinstall the .NET Framework on the server to see if that has any impact.

Could you also post what object the ASP script is being asked to get in each case?
yes i am running the default localstar.asp (microsoft script). i have tried the other microsoft script.

i have also tried another script employing the use cdonts or cdosys for setting script based e-mailing... however i get the same error on all scripts.

Yesterday when i installed the.net framework that was the first time it had been installed... do i need to reapply the service pack like you used to have to do in the old days....?

Could this be a permission issue?

I will check the IIS logs and see whats going on... should i look for anything specific.... ?

Robert
ASKER CERTIFIED SOLUTION
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial