I'm moving a static archived website to Apache from IIS/Windows, want to keep the old URLs that end with .aspx
How do I allow aspx/ashx as static content on Linux?
I don't plan to execute these files in Mono or anything, just to serve them as static (with all the code removed obviously, keeping only html)
I assume I should be doing something like this to my .htaccess:
AddType text/html .aspx
Am I right?
If you enable "classic link" for an EC2-classic instance, it will be able to talk to your VPC.
Your existing EC2-security group (assigned to the classic server) - controls all traffic to EC2-classic instance EXCEPT for the traffic with the linked VPC (according to the docs).
That traffic - between the EC2-classic instance and the VPS - is controlled by a separate security group that you assign when you set up this "classic link".
Now. Is it safe to simply allow all traffic on all ports in this VPC security group? Assuming, it connects only to my private VPC anyway.
I guess my question is - when a classic link is enabled, it "links" my EC2-instance to my and only my VPC, correct? No other traffic can physically get through this link, am I right? Thanks.
I've been googling for hours, but can't seem to find any info on this...
Is there a way I can enable "IIS Advanced Logging" for a website, but disable for a child virtual directory?
I tried "disabling" or even "removing" the "log-difinition" at the subdir level but it doesn't let me to (shows an error message).
I have a number of volumes (same size) attached to a Windows instance in Amazon AWS.
One of them is told to be an instance store.
How do I tell which one?
PS. testing the speed did not help, one of the drives IS slightly faster than the others but how I can be sure it's an instance store?
I have set up an SPF record for my domain, but I still can spoof email-addresses for my domain using fake email services like this one: http://deadfake.com/Send.aspx
The email does arrive to my gmail inbox just fine.
The email does have SPF errors in the header like this: spf=fail (google.com: domain of [email protected] does not designate 23.249.225.236 as permitted sender) but it's still received just fine, which means anyone can spoof my email-address...
My SPF record is: v=spf1 mx a ptr include:_spf.google.com -all
UPDATE In case anyone's interested, I have published a DMARC policy along with my SPF record and now Gmail marks spoof messages correctly (picture)
Is there any software tool for a Windows Server (with IIS installed), where I could set up "rules" to block incoming HTTP requests with suspicious behavior?
Like, say, if someone starts scanning my website for URLs like "/wp-admin/" or "/phpmyadmin/" or similar - I could block those IP addresses (permanently or temporary)?
PS. Not a CDN service like Cloudflare, need a self-hosted thingy...
PPS. All I found is "Dynamic IP Restrictions" module for IIS which blocks an IP address when it starts DDoSing the server with thousands of requests, but I wanted a more flexible solution.
Microsoft has this great module for IIS server:
The Dynamic IP Restrictions (DIPR) module for IIS 7.0 and above provides protection against denial of service and brute force attacks on web servers and web sites. The module temporarily blocks IP addresses of HTTP clients that make an unusually high number of concurrent requests or that make a large number of requests over small period of time.
The default values are:
- Deny IP address for 5 concurrent requests
- Deny IP address for 20 requests in 200 milliseconds
I was wondering if anyone has any recommendations on these values? I'm not a server admin, I'm a developer without any security background...
PS. By the way, when a browser requests a web page, doesn't it make concurrent requests? For all the images/css/js fils on the page...
THANKS!
I have an EBS-backed Windows EC2 server with an additional ephemeral drive (aka "instance store") which is really fast (SSD). The instance runs an IIS website + SQL Server
What can I move to the instance-store to fasten things up?
Currently I have moved:
What else can I move to the ephemeral drive to fasten things up? Windows TEMP folder? IIS logs? Would love the ideas.
I have a Windows Server 2012 with rather slow hard-drives BUT with a lot of RAM and I can't change that (it's an Amazon EC2 actually).
What can I do to optimize performance?
I have 16 GB of physical memory but 5-6 GB of it always stay free. Should I increase disk-cache size? Or maybe disable the page file? Or make it fixed size? Interested in general Windows tuning tips, possibly not involving "buy a faster drive from Amazon" :)
PS. The server runs an IIS web-server (intensively used) and an SQL-server with one small (6GB) database. SQL already uses 7GB (looks like all the DB is already cached there).
Thanks guys!
I want to catch all emails sent to * @ *.domain.com to a single account, how do I do that?
I've already set up a wildcard MX record, and it resolves correctly. But I'm having trouble finding any email-server software capable of this.
PS. I'd prefer a hosted/web-based solution, or a Windows solution, since our farm is built around Windows-servers... But a *nix option is also fine :(
PPS. Google Apps cant' do that, tried it...
I'm trying to install and run the nmap tool to test my server, but it keeps saying
Note: Host seems down. If it is really up, but blocking our ping probes, try -P0
and showing all the server ports are closed. Which is not true - the server is up and has lots of open ports. Any ideas?
UPDATE: Just to clarify - the server can be pinged and port-scanned fine by other programs. It's juts nmap that does not work. Even "google.com" seems to be down for nmap.
Set objFirewall = CreateObject("HNetCfg.FwMgr")
Set objPolicy = objFirewall.LocalPolicy.CurrentProfile
objPolicy.FirewallEnabled = FALSE
This script does not work in Vista/2008 and Windows 7 anymore. Even with elevation.
The error box is shown "a program or firewall is not compatible with this version of windows"