I got the following interesting question about IIS security and whether it was better to "protect" IIS with an Apache server in front of it. Hmm, let's take a step back and look at what is security... Question: Hey, I really like your blog. I was...

Invariably, when you run IIS servers that are load-balanced or forwarded requests behind some other network device, you will find that IIS logs the IP of the network device and not the original client that made the request. Technically, there is no...

I got this recent question concerning the "limitations of ISAPI" as it pertains to mass shared hosting on IIS6. Hmm... I had to do a double-take because I was not aware of such limitations of ISAPI - in fact, Microsoft has published a mass shared hosting...

I was sifting through my list of blog posts recently (I now have over thee dozen unpublished posts sitting around in various stages of completeness...), and I found and decided to complete this one. I actually wrote this post back on March 2, 2004...

Question: Hi David, Thanks for the blog / posts... I have installed the DebugDiag from MS Betas, and have heaps of reports saying... Please follow up with the vendor Microsoft Corporation for C:\WINDOWS\system32\ntdll.dll and wonder if I can...

I recently got a question concerning ISAPI using managed assemblies. Question: Hello First of all I developed an isapi extension that was a simple one. It was working properly. I then add referneces to some managed dlls in it and copied them...

I recently got this question about encountering a 503 Service Unavailable error on 64bit Windows. The author chose to uninstall .NET Framework 1.1 as the resolution, but I think there are some better alternatives... Question: I was delighted to...

Recently, I have seen a bunch of questions asking: "IIS6 runs fine for X amount of time [where X varies from days to weeks] and then all of a sudden, it stops accepting all connections. If I restart/reboot the server, then it is fine again... until X...

A common, mysterious behavior encountered by ASP applications on IIS6 is the loss of session state. It seems to disappear more often and Session.Timeout seem to be ineffective. Why? Question: I have session.timout set to all day(1440 minutes). ...

One of the least leveraged features of IIS is the IIsWebFile, which can work absolute wonders within the proper configuration, as I will shortly show... Question: Hi I have a CGI script (in perl) in a cgi-bin directory. I want to be able to run...

Ok, I have been pretty busy the past 10 days with both work and life, and I have not had a chance to post any blog entries. While I cannot say that I am any less busy now, I definitely have a lot of catchup and posts to make... so here goes. This question...

I recently got this question about the behavior of QUERY_STRING values. Unfortunately, server variable values are more a matter of art than science, as I will shortly describe... Question: Hi David, I am having an interesting problem. I have...

This is a frequent source of confusion - how ASP.Net and IIS does application isolation. The key point to remember is that IIS runs native code and thus relies on NT user identity (and thus NT process) for isolation, while ASP.Net runs managed code with...

I recently got this question about how to not log certain requests to the IIS log file. Question: As a hosting provider on several high traffic IIS6 based sites, we see TONS of disk space chewed up by the log entries that reflect our remote monitoring...