Stumbled across some great articles about FTP, SSL and Active/Passive settings made by Alun Jones (Security MVP). How FTP Data Connections Work Part 1 (OR: Don’t Open Port 20 in your Firewall!) How FTP Data Connections Work Part 2 (OR: Fun With Port 20) FTP 7.5 + SSL + Non-default port / AspNetAuth Thanks to Steve Schofield for the reference.
The IIS team has made the URL Rewrite Module for IIS 7.0 Release To Web (RTW) available for download. This is a final, production-ready release that is officially supported by Microsoft. Overview URL rewrite module provides a rule-based rewriting mechanism for changing requested URL’s before they get processed by web server. The module can be used to express URL rewriting logic that can use regular expressions or wildcards and can make rewriting decisions based on …
Stumpled across a interesting new module for IIS 7.0: Helicon APE (APache Emulation) by Helicon Tech, currently in beta and available for download. Helicon Ape is a unique module that emulates Apache execution environment on Microsoft IIS. It literally implements Apache configuration model (like .htaccess and httpd.conf files) and all most demanded Apache modules in a single IIS add-on, not only making IIS compatible with Apache, but also extending it’s functionality by a number of …
About a week ago, the IIS Team released an updated version 3.1 of the URLScan tool. If you are running ver. 3.0, it’s recommended that you upgrade to URLScan 3.1. URLScan is the tool to protect your websites against SQL Injection Attacks, the new version is updated to handle new variation of attacks. Our internal security team brought it to our attention that they’d seen a new variation on the attacks. This new variation is …
The IIS Team has released the final version (1.0) of the IIS Media Pack. IIS Media Pack 1.0 currently includes the Bit Rate Throttling and Web Playlists extensions for IIS 7.0, which enable you to: Save bandwidth costs by throttling the speed at which content is downloaded Decrease network traffic by metering your media deliveries Monetize media assets with Web playlists that personalize content and prevent ad skipping Intelligently deliver multiple media formats from a …