As an aside if you are seeing a DR watson or it in your event logs
Roger posted this a few days ago
> -----Original Message-----
> From: John Cesta - Lists [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, August 07, 2001 9:41 PM
> To: IIS50 Discussions
> Subject: POSSIBLE FIX CODE RED PATCH !!
>
>
>
>
> I found this on a ColdFusion list I subscribe to.
>
> It may be a solution for the inetinfo crashes:
>
>
> For over two weeks, a couple of shared web servers have been
> going nuts. Dr
> Watson locks Inetinfo, W3SVC stops, cycling all services
> usually did the
> trick. This trend escalated over the weekend with all of the
> probing going
> round.
>
> I gave in last night and called MSFT for help. He looked at
> my Dr Watson
> and quickly knew the problem, HTTPRedirect s in IIS after applying the
> CodeRed patch. I used MDUTIL.exe to dump IIS to a text file
> and searched
> for HTTPRedirect. Found a total of three across the two of
> them. Opened
> IIS, reset IIS to point to a directory, put a Default.asp in
> that directory
> with a single line <% RESPONSE.REDIRECT "HTTP://[IP]"; %> .
> Cycled IIS and
> the problem was solved.
>
> MSFT did not charge as this is a bug in the IIS / CodeRed patch.
>
> John Cesta
>
-----Original Message-----
From: Dean Cunningham [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, 14 August 2001 4:30 p.m.
To: NT System Admin Issues
Subject: RE: Strange Win2k Site access - WIERD!
Yes, put Tiny Personal Firewall on the box and see what it is trying to
connect to on the outside world and what is trying to connect to you.
YOu should be able to disable it to get your ISP connection up and then
enable it and see what chatter occurs.
-----Original Message-----
From: Robert E Young [mailto:[EMAIL PROTECTED]]
Sent: Monday, 13 August 2001 12:17 p.m.
To: NT System Admin Issues
Subject: RE: Strange Win2k Site access - WIERD!
Curiously enough I am having a similar problem, any chance this is virus
related ?
***************************************************
This e-mail is not an official statement of the
Waikato Regional Council unless otherwise stated.
Visit our website http://www.ew.govt.nz
***************************************************
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
***************************************************
This e-mail is not an official statement of the
Waikato Regional Council unless otherwise stated.
Visit our website http://www.ew.govt.nz
***************************************************
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
