???????? ???????? ? fine-tuning ??? ??????? ?????? ???????? Urlscan ?? ???? Exchange 2003

?????? ????????? ?????? ?????????
???? ???????: 823175 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

???? ??? ??????? ????? ??? ????? ????? ????? ??????? ?????? (IIS) 4.0 ????????? ???? ??? ???. ???? ??? ??????? ???????? ???????? ???? ?? ???? ??? ??????? ???? ?????? 2.5 Urlscan ?? Microsoft Exchange Server 2003 ?????. ???? ??????? ???? Urlscan ????? ????? ????? ????? ??????? ?????? (IIS) 4.0 ????????? ???? ??? ???. ??? ????? ???? 2.5 Urlscan ????? ????? ??????? ???? ????? ?????? IIS ????? ? ???????? ?? ????? ???? ????????? ????? ??. ????? ??? ????????? ???? ?? ????? ?? ??? ??????? ??? ??? ????????? Exchange 2003. ??? ???? ??????? ??? ??? ??? ???? ????? ????????? Exchange 2003 ???? ??? ?????? ??? Outlook ?? Microsoft "(OWA) ?? ????? ?????? ??????? ?? ?????? ???, ????? ????? ??????? ??? ?????? ?? ??? ??? ??????? ???????.

??????? ????

????? ???????? ???? Urlscan ????? ?? ????? ?????? ????? ??? ???? ??????? ???? ?? Exchange Server 2003. ????? ???????? ?? ????? ???? ????????? ??? ????? ??? ??????? Urlscan.ini ?????? ??? ????? ???????. ?????? ????? Urlscan.ini ???? ??????? Exchange 2003 ????? ?? ???? ??? ????? ??????? ?? ?????? [AllowVerbs] ?? ????? Urlscan.ini. ??? ???? ???? ?? ????? ?????? ??? ?????? ??????? ??????? ??????? ????????? ???? ????????? ????? ??. ??? ?????? ??? ????? ????? ??? ??? ??? ???? ??????? ????, ??? ?? ??? ??????? ?????? [AllowVerbs] ????????.

?????? ??? ??????? ??? ????? ???? Urlscan ??? ??? Urlscan.ini. ??? ??? ????? Urlscan.ini ?? ?????? ?????? ??? ???? ????????? ????? ?? ??? Exchange Server 2003:
WinDirWinDir\System32\Inetsrv\Urlscan
?????? ?????? ?????? 2.5 Urlscan ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=23d18937-dd7e-4613-9928-7f94ef1c902a
?????? ????? ??? Urlscan.ini ???????? ??? ??? ????????? Exchange 2003 ???????? ????????? ?? ?????? Exchange Server 2003 Urlscan ??????? ?? ??? ???????. ??? ??? ???? ?? ??????? ??? Urlscan.ini ????? ?????? ????? ?? Exchange 2000 ????? ??????? ??? ?????. ????? ????? ??? ??? ???? ??? ??????? ????? ?? Exchange 2003.

??? ??? ????? ????? Urlscan.ini ??? ????? ????? ????? IIS. ?????? ????? ???? IISRESET ?? ???? ??????? ?? ???? ????? ??????? ENTER.

???? Exchange Server 2003 Urlscan

; Exchange 2003 Urlscan configuration for OWA, Outlook Mobile Access, Exchange ActiveSync, 
; remote procedure call over Hypertext Transfer Protocol, and Web Folders.
; Version 1.1
[options]
; NOTE: Customers with Exchange 2003 running on Windows Server 2003 with URLScan installed may need to modify the "VerifyNormalization=1" 
; option in this template to be "VerifyNormalization=0" if they encounter a "404" error when attempting to open messages or items that contain 
; the "+" symbol in the subject or name.  
UseAllowExtensions=0          
NormalizeUrlBeforeScan=1      
VerifyNormalization=1         
AllowHighBitCharacters=1       
AllowDotInPath=1              
RemoveServerHeader=0          
EnableLogging=1         
PerProcessLogging=0        
AllowLateScanning=0        
PerDayLogging=1              
RejectResponseUrl=           
UseFastPathReject=1          
;LoggingDirectory=
LogLongUrls=0

[AllowVerbs]
; These are the only verbs that are permitted.
GET
POST
PROPFIND
PROPPATCH
BPROPPATCH
MKCOL
DELETE
BDELETE
BCOPY
MOVE
SUBSCRIBE
BMOVE
POLL
SEARCH
HEAD
PUT
OPTIONS
RPC_OUT_DATA 
RPC_IN_DATA 
X-MS-ENUMATTS 
LOCK
UNLOCK

[DenyVerbs]

[DenyHeaders]
;
; Request headers that are listed in this section cause Urlscan to
; reject any request where these request headers are present.
;
; List headers in the form
; Header-Name:
transfer-encoding:

[AllowExtensions]
;.asp
.cer
.cdx
.asa
.htm
.html
.txt
.jpg
.jpeg
.gif

[DenyExtensions]
; Deny executable files that might run on the server.
; DO NOT include .exe in this list if Exchange 2003 OWA is configured to use SMIME as that would disable OWA.
.exe
.bat
.cmd
.com

; Deny scripts that are used infrequently.
.htw     ; Maps to webhits.dll, part of Index Server.
.ida     ; Maps to idq.dll, part of Index Server.
.idq     ; Maps to idq.dll, part of Index Server.
.htr     ; Maps to ism.dll, a previous administrative tool.
.idc     ; Maps to httpodbc.dll, a previous database access tool.
.shtm    ; Maps to ssinc.dll for server-side includes.
.shtml   ; Maps to ssinc.dll for server-side includes.
.stm     ; Maps to ssinc.dll for server-side includes.
.printer ; Maps to msw3prt.dll for Internet printing services.

; Deny various static files.
.ini     ; Configuration files
.log     ; Log files
.pol     ; Policy files
.dat     ; Configuration files

; Deny extensions for Outlook Mobile Access.
.asax
.ascs
.config
.cs
.csproj
.licx
.pdb
.resx
.resources
.vb
.vbproj
.vsdisco
.webinfo
.xsd
.xsx
; .dll ; Cannot do this for RPC over HTTP or for Exchange ActiveSync.

[DenyUrlSequences]
..  ; Do not permit directory traversals.
./  ; Do not permit trailing dot on a directory name.
\   ; Do not permit backslashes in URL.
%   ; Do not permit escaping after normalization.
&   ; Do not permit multiple Common Gateway Interface processes to run on a single request.

[RequestLimits]
MaxAllowedContentLength=1073741824 
MaxUrl=16384
MaxQueryString=4096

??? Exchange Server 2003

????????? ??????

  • ??? ??????. ????? ????? ???? .dll ?? ?????? [DenyExtensions] ??? ??????? ??????? ?????? (RPC) ??? ???????? ??? ???? ??????? (HTTP) ??? ?????? ??? ?????????.

Outlook Web Access

?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] ?? Access ??? Outlook (OWA) ? ??? ????? OWA ????? ???????? ??? ??? ??? ??????? ?????? ?? ??? ??????? ???????:
  • ??????
  • ???
  • ?????
  • ?????????
  • propfind
  • bmove
  • bcopy
  • ????????
  • ???
  • proppatch
  • bproppatch
  • ???
  • bdelete
  • mkcol
  • ????
  • ??????
  • ???

Outlook Access ??????

?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] Outlook ??????? Access? ??? ????? Outlook ??????? Access ????? ???????? ??? ??? ??? ???? ??????? ??????:
  • ??????
  • ???
  • ???
?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] Outlook ??????? Access? ??? ????? Outlook ??????? Access ????? ???????? ??? ??? ??? ???? ??????? ???????:
  • propfind
  • proppatch
  • ???
  • ???
  • ?????
  • ???
  • X ???? ????? enumatts

???? Exchange ActiveSync

?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] ?? Exchange Server ActiveSync ??? ????? Exchange ActiveSync ????? ???????? ??? ??? ??? ???? ??????? ??????:
  • ???
  • ??????
  • ????????
  • ????? ????????
?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] ?? Exchange Server ActiveSync ??? ????? ActiveSync ????? ???????? ??? ??? ??? ???? ??????? ???????:
  • ??????
  • ???
  • propfind
  • proppatch
  • mkcol
  • ???
  • ???
  • bmove
  • ?????
  • ???
  • ??????
  • X ???? ????? enumatts
  • ????????
  • ????? ????????

??????? ????? ???? ??? ???????? ??? ?? ?????

?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] ?? RPC ??? HTTP:
  • rpc_out_data
  • rpc_in_data

?????? ???

?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] ??????? ???:
  • ??????
  • propfind
  • ???
  • bcopy
  • ???
  • bdelete
  • mkcol
  • ??????
  • ?????
  • ????? ?????
  • ???
??? ?????? ??? ?????? ????? ??????? URL:
[DenyUrlSequences]
:

????? ?????? ???????

?????? ?? ????? ????? ???????? ?? ?????? [AllowVerbs] ?????? ?????? ???????:
  • ???
  • propfind
  • ?????
  • proppatch
  • ???
  • mkcol
  • ???
  • ????
  • ??????

????? ???? ??? ???? ???? ????? ??????? Server 2003 ??? ???

???? ?????? ?????? ???? ??? ??? ???? ???????? ??? ??? ??? ???? ??????? Exchange Server 2003. ????? ????? ?????? ?????? ??? ???? ???????? ??? ??? ?????????. ??? ?? ??? ??? ????? ????? ??? ??? ??? ???? ??????? ???? ??? ??????? ???? ???? ???? ?????.
?? ??? ??????????? ??? ??????
[RequestLimits]owaOutlook Access ??????
??????? ????????
Outlook Access ??????
???????
Exchange ActiveSync
??????? ????????
Exchange ActiveSync
???????
RPC ??? HTTP
MaxAllowedContentLength10,485,76010,485,76010,485,76065,53665,5361,073,741,824
MaxUrl ?????16,38416,38416,3841. 0241. 02416,384
MaxQueryString4,0964,0964,0964,0964,0964,096

?????? ????? MaxAllowedContentLength OWA ????? ????????? ?????? ??????? Access ?????? ?????? ?? Outlook ??? ??? ????? ???? ??????? 10 ????????. ????? ????? ??? ??????? ???????? ??? ???????? ??? ??????? ????????.

entourage X ?? ????? Microsoft Exchange ?? Entourage 2004

?????? ?? ????? ????? ?????? ?? ?????? [AllowVerbs] X Entourage ?? Microsoft Update Exchange ?? Entourage 2004:
  • ??????
  • ???
  • ?????
  • ???
  • ?????????
  • propfind
  • ????????
  • ???
  • proppatch
  • ???
  • mkcol
  • ?????
  • ????? ?????

???????? ????????

??? ??????? ??????? ???????? ???????? ???? ?? ?????? ???????? ??? ????? ????? ??? ???????. ???? ??? ???? ?? ????? ?? ???? ??? ????? ?????? ????? Urlscan.ini ???? ??? ?????.

Exchange ActiveSync

????? SMTP Exchange ActiveSync ???????? DenyExtensions ?????????? ???? ?????? URLScan.ini ?????? .com ?? ?? URL. ??? ??? ????? SMTP ???????? a.com ??????? ??? ? ????? ????? SMTP. ???? URL stripped ?? ????? 404 IIS ??? ???? ???? ??????. ??? ??????? ???? ??? ??????? 404 IIS ????? ??? ???? ????? 500. ?????? Exchange ActiveSync ?? SP2 ????? ?????? ??? ??????? ??? ???? Microsoft Outlook Web Access.

?????? Exchange Server ActiveSync ?? Microsoft Exchange Server 2003 Service Pack 2 (SP2) ????? SMTP ?????? ???????? ????? ?? ????? ???????? ???? ?????? ??? ????? ????? ??? ?????? ??????? /exchange.

????????? ??????

  • AllowDotInPath. ???? ?? ????? ????? AllowDotInPath ??? 1 ?????? ?? ??? ???? ?????? ??? ???????? OWA ???? ?????????? ??????? ?????? ??? ??????? OWA. ?????????? ??????? ?????? ????? Microsoft Internet Explorer 5 ??????? ? ????? Microsoft Internet Explorer 4.x ?? Windows 95 ?????????? ??????? ? Microsoft Internet Explorer 4.01 ?????? ????? ?????? Service Pack 2 ????? ??????? Windows 98 ?????????? ??????? ? Netscape Navigator.

    ???? ??? ??????? ????? ??? ????? ?????? ???????. ????? ?????? ??????? ?????? HTTP "??????? ??????" ?????? ??????? (DAV) ?????? ???? OWA. ??? ????? ??? ??????? ??? ?? ???????? ???? ????? ??? ????? ???????? ????????. ?? ???? ????? ??? ??????? ??? ????? ????????? ?????? ??? ???????? ?? ?? ???? ????? ???????? ???????? ??? ????? ????????? ???.

Outlook Web Access

  • ?????? ?????. ?????????? ?? ??? ????? ??????? .htr. ??? ?? ??? ????? ??? ????? ?? ??????? ?? ???? ???? OWA ????? ???? ?????? ??? ????? OWA ??? ???? ??????? ????? ??? ???? ??????? Windows 2000. ??? ??? ?????? Exchange Server 2003 (?? Exchange 2000) ??? ???? ??????? ???? ????? ??????? Windows 2000 Service Pack 4 ????? ????? ???? .htr. ??? Windows 2000 Service Pack 4 ??????? .htr ?????? ?? Asp.dll ????? ?? Ism.dll.

    ?????? ?? ???? ????? OWA ??? ???? ??????? ???? ????? ??????? Windows Server 2003 OWA ?????? ???????? ???? ?????? ????? IIS 6.0 ????? ?????? ?????? (ASP). ?????? ??? OWA ?? ????? ??????? .htr ??? ?????.

    ????? ?? ????????? ??? ????? ????? ???? "????? ???? ??????" ?? OWA ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    297121????? ???? "????? ???? ?????? ?? Outlook Web Access
  • DenyUrlSequences. ?? ?????? [DenyUrlSequences] ???? ?? ??????? ?? ???? ???? ??????? ???? ??? ????? ???? ???? ???? OWA. ?? ????? ?????? ?????? ?? ??? ???? ?????? ???? ????? ??? ?? ??? ?? ??????? ????? ?????? ?? ??? ??????:
    • ..
    • ./
    • \
    • %
    • &
    ??? ???? ??????? ?? ???? ?????? ?????? ???? ????? ???? ???? ?????? ?????? ???? ?????. ??????? ???? ????? ??? ?????? ??????? ????? ????? ?????? . / ???????:
    / Folders/Projects./Costings.eml ??????/Exchange/????
    ?????? ?????? ????? ?? ???? ???? ??? deny ????? ?? .. ????? ???? traversals ??????:
    / ??????/Exchange/????/???? message.eml
    ??? ?????? ??? ?????? ?????? ??? ?????? ????? ????? OWA ?? ????? Urlscan ? ???? ?? ????? ??? Urlscan ?????? ??? ????? ??????? ???? ?? ?????. ?????? ?? ?????? ????????? ?????? ??????? Urlscan:
    WinDir\System32\Inetsrv\Urlscan\logs
    ???? ??????? ?? ?????? [DenyUrlSequences] escaping ("% ? ?? ???? escaping ??? ???????.") ????. ??? ???? ?? ???? ??? ??????? ?? OWA ????? ????? ??????? ?????? ??? ?????? ????????? (?? ?? ??? ??? ???? ?? % character).
  • DenyHeaders. ??? ??? ?????? ?????? ????? Exchange ???????? Outlook Web Access ?? Entourage ?? ?????? ?? ?????? [DenyHeaders] ?? ????? URLscan.ini ??? ??? ???????.

    ??? ?? ????? ??? Token ????? ???? ? ?? ?????? ???????? ???????:
    • ?? ???? ?????? ?????? ?? ?????? ?? ????????? ?? ?? ???? Entourage.
    • ?? ????? Outlook Web Access ???? ?????????.
    • ????? ??? ??????? ?? ???? ????? ??????? ???????? ????.
    • ?? ??? ????? ??????? ??????? ?? URLSCAN.log:
      [06 24-2005-00: ??: ??] ?????? ?? XXX.XX.XXX.XX: ??? ????? ?? ??? ????? ??? URL ' ????? - ????? ??????: ' ??? ?????. ???? ???? = '1' ? URL='/exchange/test/Inbox/Costings.EML/XXXXXXXX ???????
    ????? ?? ?????????? ?? ?????? ???? Microsoft ?????? ??? ?????:
    http://msdn2.microsoft.com/en-us/library/aa125886.aspx

????? ?????? ???????

  • DenyExtensions. ??? ????? .com ?? ?????? [DenyExtensions] ?? ??????? Urlscan.ini ??? ??? ???? ???? ??? ?????? ??????? (DNS) ????? ??? ?????? ??????? .com.

?????

????? ?? ????????? ??? ???????? ???????? ???? ??? ??? ??????? ????? IIS Lockdown ?? ???? Exchange 2000 ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
309677???????? ???????? ???? ??? ??? ??????? ????? IIS Lockdown ?? ???? Exchange 2000 Server


???????

???? ???????: 823175 - ????? ??? ??????: 13/????/1428 - ??????: 9.1
????? ???
  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange Server 2003 Standard Edition
????? ??????: 
kbmt kbinfo KB823175 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????823175

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com