<div>
You can check the following link for a work around:<br />
<a href="http://pubs.logicalexpressions.com/pub0009/LPMArticle.asp?ID=214" rel="ugc">http://pubs.logicalexpressions.com/pub0009/LPMArticle.asp?ID=214</a><br />
<br />
Hope it helps
</div>


<div>
I understand the article but unfortunately IIS 5 is the one sending the 302 message. We get this message only when we hit a directory that exists but we are not allowed to see. The Browser will redirect to the index page, but the header message will have the 302 message with the location. We do not have a page during the redirection, is IIS 5 when you hit the directory and send you to the index page.
</div>


<div>
<div class="content wysiwyg-content">
We are running a security audit against our load balanced website. When the telnet tool 80 hits an existing directory without hitting a valid page on our site it the browser shows our html page not found redirection, but the telnet session shows the following message <br />
<br />
HTTP/1.1 302 Object Moved<br />
Location: <a href="http://server01/admin/" rel="ugc">http://server01/admin/</a><br />
Server: Microsoft-IIS/5.0<br />
Content-Type: text/html<br />
Content-Length: 148<br />
<br />
Because it shows the server name the Audit tool figures it out that our site is load balanced and it throws an alert. We do not have this problem if we hit a page that does not exist or a page that exist because the Customized Header from IIS show up www.xxx.com&nbsp;instead.<br />
<br />
Any suggetion where can I delete or change the Location value on the 302 object moved error?<br />
<br />
Thanks
</div>
</div>


We are running a security audit against our load balanced website. When the telnet tool 80 hits an existing directory without hitting a valid page on our site it the browser shows our html page not found redirection, but the telnet session shows the following message 

HTTP/1.1 302 Object Moved
Location: http://server01/admin/
Server: Microsoft-IIS/5.0
Content-Type: text/html
Content-Length: 148

Because it shows the server name the Audit tool figures it out that our site is load balanced and it throws an alert. We do not have this problem if we hit a page that does not exist or a page that exist because the Customized Header from IIS show up www.xxx.com instead.

Any suggetion where can I delete or change the Location value on the 302 object moved error?

Thanks

HTTP/1.1 302 Object Moved

A web server refers to the software that helps to deliver web content that can be accessed either through the Internet or through an intranet. The primary function of a web server is to store, process and deliver web pages to clients. The communication between client and server takes place using the Hypertext Transfer Protocol (HTTP). The most common use of web servers is to host websites, but there are other uses such as gaming, data storage, running enterprise applications, handling email, FTP, etc.

Web Servers

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.