dslreports logo

    All FAQs Site FAQ DSL FAQ Cable Tech About DSL Distance DSL Hurdles »»


how-to block ads

1.3 How To: IIS

It doesn't matter if you are running Apache or IIS, Windows leaves a lot of vulnerable ports open.

Check which of your ports are open by going to this site's port scan tool /scan

In security, you want to adopt a "belt and suspenders" approach to most things. In this case you may want to use second second port scan tool. A well known port scan tool you can try is ShieldsUP! at »www.grc.com/ (skip through the cover page by clicking the ShieldsUP! logo then find the link for the test, about halfway down the page, click through the disclaimer, then click "all service ports").

If you are running Windows 2000 Server, Windows 2000 Professional, Windows 2003 Server, or Windows XP Professional, you can use the built in IPsec facility to make a packet filter. The IPsec facility allows you very granular filtering: by IP address, port, and protocol.

If you have XP Home, you can't set up an IPsec packet filter. Your best move is to upgrade to XP SP2 and use its built-in firewall.

If you are running a public web server you really should consider one, even if you already have a firewall.

To setup an IPsec packet filter on Windows 2003 Server see »www.microsoft.com/technet/prodte···159.mspx
For more information, including Windows 2000 Server, see »www.microsoft.com/technet/itsolu···cld.mspx

You should also consider using a packet filter if you take your laptop to public hotspots, or you move it between the network at home and the network at work.

There's no substitute for keeping your system up to date: Windows Update is your friend. Run it at least once a week on your production servers, and set all your clients to install patches automatically.

by big greg See Profile
last modified: 2005-11-04 14:23:17

Windows XP Professional runs IIS version 5.1, which comes with a 10 connection limit. Often that's not enough when you are testing a site from multiple browsers (or multiple locations). You can easily increase the limit to the hardcoded maximum: 40 connections.

Make a command prompt window (start, run, cnd.exe) and issue these commands.
cd \inetpub\adminscripts
cscript adsutil.vbs set w3svc/MaxConnections 40
The first command connects you to the adminscripts folder. The second command runs a script that sets the MaxConnections value in the IIS metabase to 40 (the maximum allowed). The third command (iisreset) shuts down and then restarts IIS.

Feedback received on this FAQ entry:
  • Thank you sir

    2013-08-28 03:04:49


    2013-06-08 03:40:17

  • I need max 200 connections. Is it possible?? Plz reply

    2013-03-14 10:17:57

  • WOW this solved all my problems !

    2012-06-12 01:00:12

  • Thank you so much!!! This fixed my random images not loading.

    2012-01-23 15:18:37

  • Thank you very much!!!

    2011-11-07 09:52:25

  • its really helpful, thx

    2011-04-01 04:15:43

  • Thank you very much it helps a lot.

    2010-05-04 04:10:47

  • am having a report that system can not find the path specified

    2009-11-11 10:54:04

  • It worked for me on several occasions. Thanx for the knowledge shared. Ajit Jha

    2009-11-09 05:08:01

  • Very informative Thanks a lot

    2009-09-17 06:57:35

  • thanku u very much

    2009-05-08 11:26:39

  • its too GOOD... Thanks dude..

    2009-03-22 23:13:42

  • cmd.exe not cnd.exe

    2009-01-12 20:58:33

  • Wow, great FAQ! You say that 40 is the hardcoded maximum; is this an OS limitation, or a limitation of the IIS version that comes with XP? jworden@brownsburg.k12.in.us Thanks!

    2008-01-23 10:31:54

by big greg See Profile
last modified: 2005-06-09 09:24:20

The feature of Apache lets your web site take a URL and rewrite it for passing to your server side scripts.

ISAPI_Rewrite is a powerful URL manipulation engine based on regular expressions. It takes the same regular expressions and options as Apache's mod_rewrite.

It comes in two versions: ISAPI_Rewrite Lite is free. It doesn't support per-virtual-site configurations, proxy, and few other options. ISAPI_Rewrite Full is the full product, available on a try-before-you-buy basis.

More information and downloads are available by going to »www.isapirewrite.com/

by big greg See Profile

Perl is a cross-platform scripting language. Several free packages for web sites are written in Perl. The Perl interpreter is mature and easy to install. Once you install Perl, you can use it to run Perl scripts from the command line or for web pages under IIS for Windows 2000 and later (IIS 5, 5.1, and 6).

Many web tools are written in Perl, including MRTG and AWStats.

For a free Perl installation, go to the ActiveState site and follow the links to download and install Perl. The installer does a good job at setting up your IIS system to run Perl scripts for web pages.

Download ActiveState Perl from »www.activestate.com/

by big greg See Profile
last modified: 2005-06-09 09:22:28


If you are running Windows XP you can run the IIS 6.0 plugins on your computer. Just download the Windows Server 2003 Administration Tools Pack from Microsoft.

by big greg See Profile