created iis site virtual directory pointing to my vs development directory

created a local domain in my hosts file, created a binding to that domain and can run site with that

also created a binding (with no domain name) to my local ip with unique port 8082 and can run site with local  ip using the unique port

in router i created a port forwarding for my public ip with unique port 8181 pointing to my local ip with the unique port 8082 above but getting err_connection_refused when trying to access external url with forwarding port for an external test. my box testing the external address is on my same local lan as my dev box with the iis site above. 

don't know of any firewall I created that would be blocking me?

any ideas what I'm running into?

I have Configured ARR 2.0 on Windows 2012 , and successfully created server farm. at back end we are using  Server sapgwa.ffbl.com:8000 and we want whenever user enter https://fior.ffbl.com/fiori it will display the page and we also want to ssl offloading so I have configured all such setting successfully, when user access the webpage it works fine but unfortunately when user login through portal the page not able to display all details such as title which is available on it. whenever I hit http://sapwa.ffbl.com:8000/fiori I am able to view all such titles on it.

Also note that I have created a website on ARR for fioir.ffbl.com, generate csr and enable SSL certificate on it.

Configuration:

ultimate target is to open https://fiori.ffbl.com/fiori and it backend it will request of

http://sapgwa.ffbl.com:8000/sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html

it might help to assist.

The typical infra architecture of an on premisse Fiori deployment includes a reverse proxy that enables access to the Fiori Apps from the internet. A responsibility of the reverse proxy is to forward the received external uri address to the protected internal Fiori resource. The generic pattern here is that the domain part of the external url is mapped to the internal url, and the remainder of the external url is concattenated to the internal url. Some / most reverse proxy products handle encoded special characters in the remainder part, well special, by decoding them before forwarding. However, (a.o.) for Fiori URLs this behaviour is undesired. The encoded characters must be forwarded as is, so that the web dispatcher on Gateway FES can decode them and process the correct decoded uri.

We're using IIS 6.0 SMTP Virtual Server to receive and forward e-mails from our website hosted on the same dedicated machine. Everything worked fine, up until we recently transfered the e-mail service to Online.net (that also hosts our dedicated web server) on a Cloud based service. I updated the Smart Host in IIS SMTP server to smtp.cloud.online.net, as well as the Authentication credentials (e-mail + password). Problem is messages sent from our website arrive to the mail server as they used to but got stuck in the Queue folder.

The Logs do not mention any particular error, but strange enough they never go further, to the Authentication process. Here is an exemple:

212.47.233.113, OutboundConnectionResponse, 29/10/2017, 18:17:24, SMTPSVC1, MUSIQUE, -, 0, 0, 28, 0, 0, -, -, 220 23a72c26dae0 ESMTP ready,
212.47.233.113, OutboundConnectionCommand, 29/10/2017, 18:17:24, SMTPSVC1, MUSIQUE, -, 0, 0, 4, 0, 0, EHLO, -, MUSIQUE,
212.47.233.113, OutboundConnectionResponse, 29/10/2017, 18:17:24, SMTPSVC1, MUSIQUE, -, 0, 0, 16, 0, 0, -, -, 250-23a72c26dae0,

When switching back to the former Smart Host SMTP server and Authentication credentials, the messages are sent just fine. Here is an exemple of the Logs from a proper transaction:

217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 63, 0, 41, 0, 0, -, -, 220 smtp-02.serveursdns.net ESMTP Postfix,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 63, 0, 4, 0, 0, EHLO, -, MUSIQUE,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 94, 0, 31, 0, 0, -, -, 250-flse665-a15.serveursdns.net,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 94, 0, 8, 0, 0, STARTTLS, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 141, 0, 28, 0, 0, -, -, 220 2.0.0 Ready to start TLS,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 219, 0, 4, 0, 0, EHLO, -, MUSIQUE,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 266, 0, 31, 0, 0, -, -, 250-flse665-a15.serveursdns.net,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 266, 0, 4, 0, 0, AUTH, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 297, 0, 16, 0, 0, -, -, 334 UGFzc3dvcmQ6,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 344, 0, 35, 0, 0, -, -, 235 2.7.0 Authentication successful,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 344, 0, 4, 0, 0, MAIL, -, FROM: SIZE=3211,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 375, 0, 12, 0, 0, -, -, 250 2.1.0 Ok,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 375, 0, 4, 0, 0, RCPT, -, TO:,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 422, 0, 12, 0, 0, -, -, 250 2.1.5 Ok,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 422, 0, 4, 0, 0, DATA, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 468, 0, 35, 0, 0, -, -, 354 End data with .,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 531, 0, 34, 0, 0, -, -, 250 2.0.0 Ok: queued as 1FA3620CD4,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 531, 0, 4, 0, 0, QUIT, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 562, 0, 13, 0, 0, -, -, 221 2.0.0 Bye,

Does anyone have a clue why the new SMTP server smtp.cloud.online.net do not ask for (or would not accept) authentication from our IIS SMTP server? Everything works fine when using this same server and credentials on Outlook.

Many thanks,

Andrei

We had migrated a calssic ASP application from IIS 5.0 to IIS 7.0 a little while back. As time goes on, I am seeing greater system utilization as a whole on the IIS 7 box than we ever really did on the IIS 5 box. I also have ASP error being logged to the Windows Event log, and have been noticing a fair number or errors on a regular basis - on top of which, every now and again we will start to get strange random errors from ASP pages... like DB connections failing for no apparent reason, etc. 

So, I am starting to take a close look at all of this to try and determine root causes.

I have enabled Failed Request Trace Logging, and have been reviewing these logs all day today. One thing I am seeing quite a bit of is :

ASP_CLIENT_DICONNECTED
ASP_LOG_ERROR   LineNumber="", ErrorCode="ASP 0147", Description="500 Server Error"

This seems to happen for random ASP pages with random querystrings... I am not able to see any patterns to it...

Anyway, I have not found too much information on this error and how to properly interperet it. TechNet says: "The client disconnected while the request was on the ASP queue." which is great, but not all that verbose. 

What could cause clients to disconnect so frequently in this manner? Networking in general seems to be fine on the server - NIC / drivers / cables / switch, etc. all seem good.

If anyone has any advice or experiences I would greatly appreciate it...

 D

I am using IIS 8.5 on a Windows 2012 server. The .Net version is 4.6.1. The app pool is running in integrated mode. 32 bit is forced because of some external libraries and the authentication mode is "windows".

My web application is using the Application_start event of the global.asax to init some global values. That works fine for the first start of my website. But later IIS never restart the application when changes are made on the global.asax (or web.config) so that Application_start not called again. Stopping and starting the app pool or an IISReset doesn't work. Even a restart of the whole server will not fix the problem. I've also tried to delete the ASP.NET temporary files - but no effect. Only if I delete all files an copy a modified !!! version of the website on the server and restart it there is a chance that Application_start is called again and the changes take effect.

In my understanding should IIS automatically restart the application after changes on the global.asax oder web.config. At least when IISReset is called the life cycle of my application should end.

Am I right or do i wrong? Is there maybe a type of misconfiguration on my side?

.rig

Hello,

We have an internal webapp with a public URL (for example webapp.contoso.com) which resolves to an internal IP address via internal DNS zone.

Now, we have to publish a few URLs from this site to the internet. (for example webapp.contoso.com/external1, webapp.contoso.com/external2)

Unfortunately we dont have a URL filter in our firewall, so we had to find an alternative solution and we wonder if its possible to do this via IIS reverse proxy.

The problem is that our external URL is the same as the internal URL, but some of the URLs must be available through the internet.

We have installed a reverse proxy server and forwarded all the webapp.contoso.com traffic from outside to this IIS reverse proxy. Then we configured the URL redirect based on the /external1(.*) /external2(.*) but when we try to browse the page from the outside it says "Cannot display the webpage". If we redirect to a different internal URL then the redirection works.

I know that its too general description of the problem, but first of all I would like to know that if it could work with the same URLs (internal and external).

Thanks for any help.

Kind regards,

Dvijne

EDIT: One more thing. Our reverse proxy uses the internal DNS server to be able to find the internal webapp server. And this is why I think its not working, because maybe it cannot deliver the response.

I am using IIS7 to run a small website (basically some technical information for myself and a few people that might need this on the road). This has always worked, but now it has stopped. What happens now is that whenever someone tries to open the web page with the FQDN, an error message pops up "This page cannot be displayed" or "Can't reach this page".

My first thought was that something is wrong with the DNS. But I can ping the server:

ping server shows the correctly resolved IP address, but times out (I think the server is set to not respond to pings)

Ping IP address has the same result (times out)

I can open the web page by using the IP address.

When I go to the IIS Manager and drill down to the site, I see the web site listed in the Actions panel under "Browse Web Site". Clicking that brings up the "This page cannot be displayed" on the server.

Could this be related to certificates on the server? I am using http, not https.

Any suggestion for troubleshooting is appreciated.

We're using IIS 6.0 SMTP Virtual Server to receive and forward e-mails from our website hosted on the same dedicated machine. Everything worked fine, up until we recently transfered the e-mail service to Online.net (that also hosts our dedicated web server) on a Cloud based service. I updated the Smart Host in IIS SMTP server to smtp.cloud.online.net, as well as the Authentication credentials (e-mail + password). Problem is messages sent from our website arrive to the mail server as they used to but got stuck in the Queue folder.

The Logs do not mention any particular error, but strange enough they never go further, to the Authentication process. Here is an exemple:

212.47.233.113, OutboundConnectionResponse, 29/10/2017, 18:17:24, SMTPSVC1, MUSIQUE, -, 0, 0, 28, 0, 0, -, -, 220 23a72c26dae0 ESMTP ready,
212.47.233.113, OutboundConnectionCommand, 29/10/2017, 18:17:24, SMTPSVC1, MUSIQUE, -, 0, 0, 4, 0, 0, EHLO, -, MUSIQUE,
212.47.233.113, OutboundConnectionResponse, 29/10/2017, 18:17:24, SMTPSVC1, MUSIQUE, -, 0, 0, 16, 0, 0, -, -, 250-23a72c26dae0,

When switching back to the former Smart Host SMTP server and Authentication credentials, the messages are sent just fine. Here is an exemple of the Logs from a proper transaction:

217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 63, 0, 41, 0, 0, -, -, 220 smtp-02.serveursdns.net ESMTP Postfix,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 63, 0, 4, 0, 0, EHLO, -, MUSIQUE,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 94, 0, 31, 0, 0, -, -, 250-flse665-a15.serveursdns.net,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 94, 0, 8, 0, 0, STARTTLS, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 141, 0, 28, 0, 0, -, -, 220 2.0.0 Ready to start TLS,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 219, 0, 4, 0, 0, EHLO, -, MUSIQUE,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 266, 0, 31, 0, 0, -, -, 250-flse665-a15.serveursdns.net,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 266, 0, 4, 0, 0, AUTH, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 297, 0, 16, 0, 0, -, -, 334 UGFzc3dvcmQ6,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 344, 0, 35, 0, 0, -, -, 235 2.7.0 Authentication successful,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 344, 0, 4, 0, 0, MAIL, -, FROM: SIZE=3211,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 375, 0, 12, 0, 0, -, -, 250 2.1.0 Ok,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 375, 0, 4, 0, 0, RCPT, -, TO:,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 422, 0, 12, 0, 0, -, -, 250 2.1.5 Ok,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 422, 0, 4, 0, 0, DATA, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 468, 0, 35, 0, 0, -, -, 354 End data with .,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 531, 0, 34, 0, 0, -, -, 250 2.0.0 Ok: queued as 1FA3620CD4,
217.76.129.126, OutboundConnectionCommand, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 531, 0, 4, 0, 0, QUIT, -, -,
217.76.129.126, OutboundConnectionResponse, 31/10/2017, 11:51:11, SMTPSVC1, MUSIQUE, -, 562, 0, 13, 0, 0, -, -, 221 2.0.0 Bye,

Does anyone have a clue why the new SMTP server smtp.cloud.online.net do not ask for (or would not accept) authentication from our IIS SMTP server? Everything works fine when using this same server and credentials on Outlook.

Many thanks,

Andrei

Hi,

I have enabled windows authentication and disabled anonymous authentication.

The IIS Authorization rules also contains the required AD groups (7 AD groups).

The problem here is that users with the only a certain group are able to access the application. A user that does not have the AD group is not able to access the application.

Is there any other configuration that needs to be done?

Shouldn't there be an OR condition b/w AD groups or it expects all groups to be present.

Hi,

We have an intranet seatnet.seatequip.company I have some users who don't like that url because we have rebranded the company.  They want that to reflect the new company name.

I am not a developer by any stretch of the imagination but I am the one who has to figure out the feasibility of doing this.

I recently read https://technet.microsoft.com/en-us/library/cc753195(v=ws.10).aspx  could it really be as easy as just adding in a new host header and going about my merry way?  Please help

Thanks bunches in advance for any assistance you can provide it is greatly appreciated.

Hi,

We've got some old web applications which were created by a developer who is no longer with us. The problem is they appear to be using the domain Administrator account to run an LDAP query when they're being used, and we can't figure out where this is configured.

What we want to avoid is breaking them if the Administrator's password gets changed. Ideally we want these WebApps to be using a dedicated account the has the least amount of permissions needed to run.

Any help that might lead us in the right direction would be greatly appreciated.

Kind Regards, Andrew

Hi,

I've a problem with application start times. I have 2 scenarios. 

1. Scenario : Application start duration after iisreset command.

- Run iisreset command.

- Browse a text file.

2. Scenario : Application start duration after copy&paste.

- Run iisreset command.

- Copy application folder(AppFolder) to another location(NewAppFolder).

- Delete application folder((AppFolder)).

- Rename NewAppFolder to AppFolder.

- Browse a text file.

2. scenario spends more time(about %25) than 1. scenario.

My question is

- What spends time in 2.scenario?

- Is there any way to avoid this duration?

Thanks

We have implemented a Reverse Proxy to  WebSphere back-end servers using ARR 2.0 and URL rewrite 2.0.  The public facing IIS website was using Forms Authentication and everything worked normal so far, but now the public facing IIS website's authentication mechanism is changed to integrate with OKTA SSO using WS-FED. As soon as the OKTA SSO integration  was done, the reverse proxy failed. The http GET requests are OK but as soon as  the traffic encounters a http POST, it fails with a socketTimeout exception. The socketTimeout exception is logged in WebSphere logs. Looking at the exception it looks like WebSphere has been waiting for the response from some where(I presume ARR) and timed-out.

Enabled FRT on IIS and it shows the error below:

MODULE_SET_RESPONSE_ERROR_STATUS 

And also two steps up, the General_Read_entity_end shows Bytes received as zero.

195. -GENERAL_READ_ENTITY_END 

Searching thru multiple forums, found this one - https://forums.iis.net/p/1176872/1976974.aspx#1976974 but here ARR clearly throwed a 502.3, it looks similar but may not be exactly the same.

Also, I tried  request.InsertEntityBody() on Application_BeginRequest in my global.asax file, but didn't help.

So, what could be the issue? and is InsertEntityBody is the right thing to do and if yes, am I doing it in the wrong event ?

Thanks.

Hi,

we are using an iis10 server, where we have our sites setup in a folder, folderwebs , this folder has administrator, creator owner and administrator rights. Beneath this solidcp creates the folderusers, with basically the inherited rights from the parent. Beneath each users folder the websites folders are created, which then has the inherited rights and then the specific application pool user account as well.

If we use php it seems that the php opendir() command has issues reading the users folders as per bug report below. I then tried adding the iis_iusrs group to the primary folder folderwebs with listfolder rights and this sorts out the issue, i then played around and assigned only the special right read attributes and this seems to work as well, what implications are there doing this like this to resolve the issue in the meanwhile, or is there another solution to this maybe ?

If the parent directory of a Windows network share is not accessible, you are still able to access subdirectories 
if given explicit permission.

However, PHP has trouble with the first accessible directory below an inaccessible directory. 
This is not a problem for the accessible dir's  subdirs, though.

Scenario:
C:/Test/NoAccess/  -- Not accessible
   Access/        -- Accesible from here
      yyyyyyy.txt
      Subdir/
         xxxxxxx.txt

The problem has been found with opendir(), is_dir() and is_readable(). All directory functions are probably 
affected.

No workarounds has been found so far (suggestions appreciated).

I also searched the exception message in the forum and the returned answers were not my cases.

Let's see the cases.

#1. I access to a direct URL which ":." symbols  (without quotes) are appened to my web application name: 

http://localhost/mywebapp:.

#2. Access to *.aspx pages appended ":." symbols and the URL does not include the web application name:

 http://localhost/Default.aspx:.

In this cases, the exception occurs before entering my web application. (I did debug my web application at Application_Start, Application_Error and the debugger did not hit to it)

So, guys, is there any configuration that I can apply for IIS server to avoid this exception. I don't want to show the yellow exception page like this to the end users. I want to show a general message instead of it.

Here is my configuration in web.config

<httpRuntime  requestPathInvalidCharacters="" maxRequestLength="1024000" requestLengthDiskThreshold="8192" enableVersionHeader="false" executionTimeout="110" targetFramework="4.5" encoderType="System.Web.Security.AntiXss.AntiXssEncoder" requestValidationMode="2.0" /><pages enableEventValidation="false" validateRequest="false" controlRenderingCompatibilityVersion="4.5" clientIDMode="AutoID" viewStateEncryptionMode="Never" enableViewStateMac="True">

Hello, 

On the front end, I have a NLB + ARR, URL Rewrite which directs everything to a server farm. As I understand, this is pretty basic configuration and does the job. (Please correct me if I am wrong) 

I want to add 2nd server farm, and only capture the requests for a dedicated domain. So to do this, I am assuming a 2nd URL ReWrite is required for sub.domain.com to forward all these requests to the 2nd server farm. How would I create such a rule to only forward these requests to the 2nd server farm? 

Thanks in advance. 

Hello, I'm trying to use Advanced Logging on an IIS 7 web site which forwards client requests to a Java Web application hosted on a Tomcat container. The connection between IIS and Tomcat is managed via the Jakarta ISAPI Redirector.

I've tried almost everything but the "cs-uri-stem" doesn't log the jsp page requested by the client. Instead, for each request the log shows "/jakarta/isapi_redirect.dll", i.e. the ISAPI filter called to forward the request to Tomcat.

 Is anybody able to help me on this?

Thanks

Greg

Hello,

I am using Windows server 2012 R2 wit IIS 8.5  .The performance issue i am reporting is on IIS ARR server where there is no application code the ARR server acts as a Proxy to the back end Application server

What i am observing the Physical memory usage in this ARR server goes beyond 98% and  also simultaneously  the virtual memory usage goes very high

In the IIS worker process the Private Bytes and Virtual bytes usage are very high for all the Web pool

As there is no code in the server and the high memory usage is for all IIS processes ,i am not suspecting any memory leak

I have recycled all the app pools and that reduces the memory usage but gradually it grows and goes beyond 98%

Can you suggest how i can troubleshoot

Regards,

Abhishek

In IIS manager, when news is enabled, it's all really old news! Please get some new news in here please.