????? ????? IIS Lockdown ?????

???? ??? ??????? ???? ????? ??? ????? ????? ???? ??? ???????? ????? Lockdown ????? ??????? ?????? (IIS). ?????? ????? ??????? ??? ????? ??????? ???????? ???? ???? ??? ????? ???????.

??????? ?????? ????? IIS Lockdown

???????? ????? Lockdown IIS ???? ????? ??? ????? ???????? IIS ?????? ???? IIS ?? ??????. ??? ????? ??????? ????? ??? ????????? ?????? ?? ???????? ???? ???? ???????. ?????? ??? ??? ?????????:

1. ????? ????? IIS Lockdown. ?????? ??????? ?? ?????? ???? Microsoft ?????? ??? ?????:
   http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=DDE9EFC0-BB30-47EB-9A61-FD755D23CDEC

   (http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=DDE9EFC0-BB30-47EB-9A61-FD755D23CDEC)
2. ??????? ??????? ????? Lockdown ?? ????? ?????? ???????.
3. ???? ?? ?????? ???? ??? ??????? ??? ??????? ??????? ??? ?? ???? ????? ??????? ??? ????? Iislockd.chm.

???? ?? ????? Lockdown ???? ????? ??? ????? ?????????? IIS ?????? ?? ??? ??????? ??????? ?? ????????? ?????? ??? Exchange ? FrontPage. ??? ?? ???? ?????? ?????? ??? ????? ????? Lockdown ?? ??? ????? ??? ?????????. ?????? ?????? ?????? ?????? ?? ?????? "????? ??????? ?? Microsoft ???????? ???? ???? ??????? ??? ????? ?????" ????? ":

• Exchange ? Outlook Web (OWA):
  309508

  (http://support.microsoft.com/kb/309508/ )

  IIS Lockdown URLscan ????????? ?? ???? Exchange
• ???? ??????? ?????? Microsoft:
  311595

  (http://support.microsoft.com/kb/311595/ )

  ????? ????? ?????? ????? ???? ???? Microsoft ??? ???? ??????? ?????? Microsoft
• ???? ??????? ??????? Microsoft:
  311862

  (http://support.microsoft.com/kb/311862/ )

  ????? ??????? ???? "????? IIS" ?? "???? ??????? ???????"
• Microsoft Project ???? Project ? Project Web Access:
  321357

  (http://support.microsoft.com/kb/321357/ )

  ???? ????? ??? ??? ??? ???? Microsoft Project Web Access ???? ????? ??? ??????
  316398

  (http://support.microsoft.com/kb/316398/ )

  ????? ????? "???? ????? IIS" ? "???? ?????? URLScan" ??? ???? ??????? ???? ????? ??????? Microsoft Project Server ?? Microsoft Project ????????
• Microsoft SharePoint Portal Server:
  309675

  (http://support.microsoft.com/kb/309675/ )

  ???? "???? ????? IIS" SharePoint Portal Server
  319633

  (http://support.microsoft.com/kb/319633/ )

  ' ??? ????? ???????? ?????: ??? ?? ????? ????????? ' ????? ????? ??? ????? IIS Lockdown ?????
• Microsoft Visual Studio .NET:
  310588

  (http://support.microsoft.com/kb/310588/ )

  PRB: ????? ASP.NET ?? Visual Studio .NET ????? ????? ????
  315904

  (http://support.microsoft.com/kb/315904/ )

  BUG: "ExternalException: ?? ???? ????? ??????" ???? ????? ??? ??? ??????? WebServices ?? ???? .aspx
• Microsoft FrontPage:
  317390

  (http://support.microsoft.com/kb/317390/ )

  ???? ????? ????? "HTTP/1.1 404 ???? ?? ??? ?????? ???" ??? ???? ?????? ???? ??? ???
  307976

  (http://support.microsoft.com/kb/307976/ )

  ???? ????? ??? ??? ??????? FrontPage ?? URLScan
• ?????? ?????? Microsoft:
  311675

  (http://support.microsoft.com/kb/311675/ )

  ?? ???? ????? Proxy Server 2.0 ??????? ?????? ??? ????? IIS Lockdown ?????
• 888936

  (http://support.microsoft.com/kb/888936/ )

  ?? ????? ????? ???? ????? SMS 2003

????? ????? IIS Lockdown ????????

1. ???? ????? ??????? ??? ????? ???????? ???? ??? ??????? ?? Prepare to run the IIS Lockdown Wizard ?????? ??? ????? ???????.
2. ??? ???? ??????? ????? ?? ?????? ?? ???? ??? ??????.
3. ??? ?????? "??????? ????????" ????? ??????? ??????? ???? ??? ????? ? ?? ???? ??? ??????.
4. ?? ?????? "????? ???? Server" ? ??? ?????? ???? ????? ????? ???? ?????? ??????? ?? ???? ??? ?????? ??????? ??? ???????. ??????? ???? ??? ??? ?? ???????? ??????? ?????? ???????? ??? ??? ?????? ???? ??? ??????? ?? ?????? ??????? ???? ????? ??????? ???? ????????? ?????????.
   
   ??? ??? ?????? ????? ?????? (??? ???? ??????? ????? ???? ??? ???? ????? ???? ????) ? ???? ?????? ???? (Server ???? ?? ????? ?? ?? ??????? ????????) ???? ?? ?????? ???? ???????? ????? ??? ??????? ??????? ?????? ???? ??????? ?????????? ?? ?? ?????? ?? ??????. ??? ????? ????????? ???????? ???? ??? ??????.
5. ?? ?????? "????? ??????" ? ??? ??????? ???? ???? ?????? ??????. ????? ???? ?????? ???? ???. ??? ?? ??? ???? ?????? ????? ?? ?????? ????? ???????? ??? ??????? (FTP) ?? ???????? ??? ?????? ?????? (SMTP) (??? ??? ?? ?????? ?????????? ????? ???????) ? ????? ????? ??? ????? ????? ??? ????????. ?????? ??? ?? ???? SMTP ?????? ?? ???? ????? Exchange ?? ???? ??????? ???????.
   
   ????? ??? ????? ??????? ???? ?? ??? ????? ??? ?????? ??? ???? ??? ???????. ??? ??? ???? ?????? ????? Lockdown ??? IIS 5.0 ????? ????? ??? ????? ????? ????? ??? ????? ? ???? ???? ?????? ??????? ???? ?? ??? ????? ?? ?????? ???? ????. ??? ????? ????????? ???????? ???? ??? ??????.
6. ?? ?????? "??????? ??????? ??????" ? ???? ?????? ????? ???? ???????? ????? ?? ??? ??? ?? ????? ??????? ???? ???? ?????? ??????. ??? ?? ??? ??????? ?? ?? ?????? ????? ????? ?? ??????? ??????? ????? ?? ?????? ?? ??? ??? ???? ?????? ????? ??????? ???. ???? ?? ???? ?????? ????? "????? ?????? ??????" (.asp) ? ??? ??? ????? ?????? ????? ???? ???????? ??? ?? ?? ??? ??????? ?? ?? ????? ?????? ????? ASP. ???? ??? ??????.
7. ?? ???? "???? ??????" ? ??? ??????? ???????? ???? ???? ??????? ?? ??? ??????. ?????????? ??? ????? ??? ??????? ???????? ???? ??????? ?? IIS ? ???? ??????? ???????? ????????? ?? ???? ?? ????? ??? ??????? ???????? ?? ??????? ??? ????? ????????? ?????? ????????. ?? ???? ????? ??? ??????? ???????? ?? IIS ??? ????? ??????? ??????? ??????? ??? ?????, ??? ??? ????? ??? ?????? ?? ???? ????? ??? ??????.
8. ?? ???? "???? ??????" ? ???? ?????? ?? ????? ??????? ???????? ?????? ??? ??? ???? ??? ?????? ??? ??????? ??????? ??????? ?? ???? Windows ??? ???? ????? (Guest) ?????? (?????????? IUSR_ <computername >). ??? ????? ??? ?????? ??? ???? ???????.
9. ?? ???? "???? ??????" ? ???? ??? ????? ??????? ??? ??????? ??????? ??? ??? ???? ??? ????? ???? ????? ?????? ???? ??? ??????? ???? ????? ??? ????? ??? ????? ???????. ???? ?? ??? ??? ?????? unselected ??? ??? ?????? ?????? ???? FrontPage ??? ??? ?????? ?? ??? ??? ??? ?????? ???? ?? ???? ????.
10. ?? ???? "???? ??????" ? ???? ?????? ????? ??? ??????? ?????? ?????? ??????? (WebDAV) ??? ?? ??? ?????? WebDAV ????? ???? ????? ??? ??? ??? ??????. ?? ???? ????? ??? ?????? Access ??? Outlook "(OWA) ?? Exchange 2000, ???? ?? ??? ??? ?????? unselected.
    ??????: ??? ???? ??? ?????? ????? ????? Lockdown ?????? ??? DLL ???? ???? ?????? ????? WebDAV (Httpext.dll) ??? ??? ?????. ??? ?? ?? ???? ???? ??? ????? WebDAV ?????. ?????? ??? ??????? ??????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    307934

    (http://support.microsoft.com/kb/307934/ )

    ????? WebDAV ???? ACL ???? ??????? PUT ? DELETE
11. ???? ??? ??????.
12. ?? ?????? "URLScan" ? ??? ?????? ?????? URLScan ??? ??? ???? ??????? URLScan ????? ??????? ??????? ???????? ??? ?????? ?? ???????. ??? ???? ???? ??? ??? ???? ???????? ??? ??????? URLScan ? ????? ???? ??? 404 "?? ??? ?????? ??? ?????" IIS ? ?????? ????? ?? ??? ??? URLScan. ?????????? ???? ??? ????? ?? % WINDIR%\System32\Inetsrv\Urlscan\Urlscan.log.
    
    ?????? ??? ???? WebDAV ????? ??? ???? "???? ??????" ????? ???? ????? URLScan ???? ???? URLScan ????? WebDAV ???? ???????. ??? ????? ????? Urlscan.ini ??? ??? ???? ??????? WebDAV ?? URLScan.
13. ??? ???? ??? ???? "??????? ?????" ?????? ????????? ???? ???? ??????? ?? ???? ??? ??????.
14. ????? Lockdown ????? ??? ??????? ????? ??????? ????? ?? ????? ???? ????????? ???????. ??? ?????? ??? ???????, ???? ??? ??? ??????? ???? ????? ???? ??? ??????? ????????? ???? ??? ??? ???????. ???? ??? ?????? ????????.
    
    ?????? ????? ?????? ??????? ??????? ?????? ??? %WINDIR%\System32\Inetsrv\Oblt-rep.log ?? ???????.
15. ???? ??? "?????" ?????? ????? Lockdown IIS.
16. ???? ???? ?????? ???? ??????? ?? ??????. ??? ?????? ??? ????. ??? ?????? ????? ????? ????? ??????? ???????? ?? ?????? ????? ?? ??????? ??????? ????????? ???? ??????? ????? Lockdown ?? ?? ?????? ????? ??????? ?????? ?????? ??????.?????? ??? ??????? ??????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    317052

    (http://support.microsoft.com/kb/317052/ )

    ????? ??????? ?? ????????? ???? ?????? IIS Lockdown ?????

????? URLScan

??? ????? ????? IIS Lockdown ????? ????? URLScan. ??? URLScan ???? ????? ISAPI ????? ???? ?????? ????? HTTP ???????? ??? ?????? ????? ??????? ?? ???????. ??? ???? ??????? ????? ????? URLScan ??? ???? ????? ????? ???? ??? ??? ? ???? ??????? HTTP ????? (??? GET ?? POST) ?? ??? ??????? ???? ????? ??? ?????? ???? ??? ??????? ???? ????? ?? ????? ??? ?????? ???.

?????? URLScan ?????? ???? ?? ??? ??????? ?????? ????? %WINDIR%\System32\Inetsrv\Urlscan\Urlscan.ini. ????? ??? ????? ??? ????? ??????? ???? ?? ???? ???????. ??? ???????? ?? ????? ????? & .ini & ???? ?? ????? ????? IIS.

?????? ??? ??????? ?????? ??? ????? ????? URLScan ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:

??????? ??????? ???????? ??? ????? ????? IIS Lockdown

??????? ?????? ?????? ??? ????? ????? IIS Lockdown ????? ??? ????? 404 "?? ??? ?????? ??? ?????" ????? ??? ??? ??? ?????? ????? ?????. ?? ????? ????? ????? ??? ??? ?? ????? ??????. ???? ??? ????? ???? ???? ??? ?? ???? ?????? ????? Lockdown ?? URLScan. ?? ??? ??????? ???? IIS ????? ??? ???? ????? ?????? ??????. ??? ??? ???? ??????? ??? ????? ??? ?????? ???? ???? ???? ???? ??????? ?????? ????????? ???? ??? ??? ? ???????? ?? ???? ???? ??? ????? ?????? ??? ??? ?????? ??????? ????? ??? ???????; ??? ???? ??? ??????? ???????? ?? ??? ????? ?????? ? ???????? ?? ????? ??????? ????.

?? ???? ???? ????? ??? 404 ??? ????? ????? IIS Lockdown ???? ??????? ??????? ???????? ???????:

1. ???? ?? ???? ????? ?????? ??? ??????. ????? ?? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
   248033

   (http://support.microsoft.com/kb/248033/ )

   ??? ???? ??????? ?????? ??????? "????? - HTTP 404 ?? ??? ?????? ???" ????? ??? ??? ???? ???? ?????? IIS
2. ??? ??? ??? URLScan ?????? ?? ??? ??? URLScan ??? ??? ???????. ??? ????? ??? ?? %WINDIR%\System32\Inetsrv\Urlscan\UrlscanMMDDYY.log (??? ???? MMDDYY ?? ????? ?????). ??? ?????? ???? URLScan ??????? ???? ??? Configure URLScan ?????? URLScan ???? ???? ??? ???????.
3. ??? ?????? ??? ???? ?????? HTML ??? ???? ASP ?? ???? ???? ????? ????? ???? ???? ?? ????? ????? ??? ????? ?? "????? ????? ??????":
   1. ???? ??? ?????? ?????? ??? ???? ??? ????? ?? ??? ?? ???? ??? ?????.
   2. ??? ????? ??????? "?????? ???????" ? ???? ??? ?????.
   3. ???? ??? ????? ??????? ??????? ?????????.
   4. ???? ??? ???? ???? ?????? ?? ???? ????? ???? ????? ?????? ????.
   5. ??? ?? ????? ???? ??????? ??? % WINDIR%\System32\Inetsrv\404.dll ? ???? ??? ????? ?? ?? ?????? ???? ??????? ??? ?????? ?????? ??????? ????????? ??? ???? ?????. ??? ?? ??? ??????? ?? ????????? ??? ????? %WINDIR%\System32\Inetsrv\oblt-log.log ???? ?? ?????? ??? ????? ????? Lockdown. ???? ?? ??? ???? ???? ?? SMAP ??????? ???? ??? ?????. ????? ??? ????? ??? ?????? ?????? ??????? ????????? ???? ?????.

??? ??? ????? ????? ?? ???? ????? ??? IIS Exchange ?? SharePoint ? ???? ?? ?????? "????? ??????? ?? Microsoft ??????? ?? ??? Prepare to run the IIS Lockdown Wizard".

????? ??? ??? FTP ?? SMTP ?? ???? ??? ????? ????? IIS Lockdown. ???? ??? ?? ???? ????? ?? ???? ?????? ??? ???????. ?? ???? ????? ??????? ???? ??????? ??????? ???????:

1. ???? ???? ??????.
2. ??? Windows NT 4.0 ??? ?????? "???????". ?? Windows 2000 ?? Windows XP ? ???? ?????? "????? ??????" ?? ?? ???? ?????? "???????".
3. ???? ????? ??????? ??? ????? FTP ?? ??? ?????? ?????? ???????? (SMTP).
4. ??? ??? ??????? ? ???? ??? ????? ??????.
5. ???? ??? ???? ??? ???? ?????? ???? ?????.

??? ??? ???? ???? ?????? ??? ?? ?? ?? ??? ??????? ?? ???? ????? ????? ??????? ??? ???????? ????? ??? ?????? ????? IIS Lockdown ??? IIS 5.0 ? ???? ??????? ??????? ?????? ???????:

1. ???? ???? ??????.
2. ??? ?????? "?????/????? ???????" ?? ???? ??? ?????/????? ?????? Windows ?? ????? ??????.
3. ??? ????? ??????? ?????? (IIS) ?? ???? ??? ??????.
4. ???? ??? ???? ???????? ??? ??????? (FTP) ?? ???? SMTP.
5. ???? ??? ????? ?? ???? ??? ??????. ???? ????? ?????? ??????? ?? ???????. ?? ??? ??????? ?????? Windows ???????.
6. ???? ?? ????? ????? ???? ???? ???? Windows ?????????? ???? ?? ???????.

??? ??? ?? ?? ??? ????? ???? ????? ??? ??? ??????? IIS Lockdown ????? ??????? ???? ????????? ???? ??????? ??????. ?????? ??? ?? ????? ?? ??????? ???? ???????? ???? ???????. ?? ??? ??? ????? ??????? ?? % WINDIR\System32\Inetsrv\Oblt-rep.log.

?????? ??? ??????? ?????? ??? ????? ??????? ?? ????????? ???? ??????? ????? IIS Lockdown ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:

?????? ??? ??????? ?????? ??? ????? ????? ???? IIS "?" ????? IIS Lockdown ???? ??? ????? ???????? ??????? ?????? ?? "????? ??????? ?? Microsoft: