Entries tagged with iis - TechNet Edge

Announcing the RTW of the IIS SEO toolkit and the RC of URL Rewriter 2.0

Joey Snow — Tue, 17 Nov 2009 18:15:00 GMT

Need to make your web site’s relevance more search engine friendly as well as create simpler URLs? Today marks the RTW (Release to Web) of the IIS Search Engine Optimization (SEO) Toolkit and the RC (Release Candidate) of URL Rewriter 2.0.

The IIS SEO Toolkit helps Web developers, hosting providers, and Web server administrators to improve their Web site’s relevance in search results by recommending how to make the site content more search engine-friendly. The IIS SEO Toolkit helps to improve the volume and quality of traffic to your Web site from search engines, control how search engines access and display Web content, and inform search engines about locations that are available for indexing.

IIS URL Rewriter 2.0 adds support for outbound response rewriting and enables Web administrators to create powerful rules to implement URLs that are easier for users to remember and easier for search engines to find. IIS URL Rewriter 2.0 helps to easily define rules that match URLs or HTTP headers to generate more friendly and consistent URLs, protect content and assets from unauthorized linking and scanning, and integrate with existing IIS features to improve management, performance, and troubleshooting.

For more information or to download, please visit the IIS SEO Toolkit RTW page and the IIS URL Rewriter 2.0 RC page. Of course for all of your IIS 7.5 needs you should visit IIS.net.

SQL Server 2008 and PHP Web Application Infrastructure

Matt Hester — Fri, 21 Aug 2009 07:01:00 GMT

Do you want to take advantage of SQL Server's great new features for your PHP sites? Join us for this session and learn how to make it happen. We'll show you how to leverage your existing development resources and PHP knowledge by simply changing the backend to Microsoft SQL Server 2008. We'll walk through the necessary steps to get PHP and SQL Server working together and you'll see how to enjoy a successful deployment and post-deployment experience. You'll also learn where to find the information you need when you deploy and scale PHP on SQL Server, including details about security, performance, backup, managing and monitoring. After the step-by-step deployment instructions and some helpful working demos, we'll be happy to entertain your questions.

For more information:
Visit the SQL PHP blog
Download the PHP training Kit

Battle Stations, a PHP app, runs better on Windows Server 2008, IIS7

Dennis Chung — Fri, 12 Sep 2008 00:53:00 GMT

Here in Singapore, we started a LAMP2WIMP project team. Focus, to help PHP application owners realize that Windows Server 2008, IIS7 can be an option for them when running PHP applications.

In this video, we interviewed Tian Yan, founder of Tyler Projects on the benchmark exercise which we did here in MIC Singapore. Windows 2008 in this benchmark, beats both centos and fedora.

Check this blog for full entry and results

Feature of the Week: URLScan 3.0 for IIS 7.0

Joey Snow — Thu, 28 Aug 2008 07:01:00 GMT

Back in April there were reports that surfaced stating that web sites running on Internet Information Services (IIS) had been compromised by an automated attack that used vulnerabilities in web pages that did not follow security for best practices. These websites were taken advantage of via SQL injection attacks. While the only way to completely prevent SQL injection attacks is by following proper development best practices, URL Scan 3.0 is an updated IIS feature that will allow server administrators to help mitigate SQL injection attacks until the web application can be updated to protect against SQL injection. This post will provide more details on the latest version of this technology.

URL Scan 3.0

Who’s it for? IT Professionals and Website Administrators.

When does it ship? URL Scan 3.0 was released to the Web on 8/21/08 and can be downloaded from the following locations:

· 32 Bit: http://www.iis.net/go/1697

· 64 Bit: http://www.iis.net/go/1698

(Wow looking at those nice clean URL’s makes me want to post about another new IIS feature. I guess more on that later.)

What does it do? When installed and configured on a server running IIS 5.1 or higher, URLScan can scan incoming http requests and if the request contains content that is undesirable (like a SQL injection attack), that request can be rejected. By filtering these requests, URLScan helps prevent unwanted requests from potentially damaging the web application or even the web server.

How is URLScan different than the request filtering module that ships with IIS 7? The request filtering module does not have the ability to filter based on query strings like URLScan 3.0 does. Also you cannot specify rules applying to multiple parts of an HTTP request.

So didn’t URLScan exist before? Yes. URLScan 2.5 was originally released as part of the IIS Lockdown Tool and if you are using URLSCan 2.5, you can use your existing configuration file with URLScan 3.0 and everything will function fine. Plus you get the added URLScan 3.0 features!

What are the new URLScan 3.0 features? While the configuration format of URLScan 3.0 is the same as it’s predecessor, there are a number of new sections in the configuration to support the following new features:

· Deny rules can be independently applied to a query string, all headers, a particular header, a URL or a combination of the above.

· Configuration change notifications are propagated to the IIS worker processes so configuration changes don’t require worker process restarts.

· The global DENYQUERYSTRING section of the configuration file allows you to add deny rules for query strings and include an option to check the un-escaped version of the query string.

· The global ALWAYSALLOWEDQUERYSTRINGS section allows for the specification of safe query strings that will bypass all query string checks. (This feature was not in the previously released URLScan 3.0 beta).

· Descriptive configuration errors are now available in W3C formatted logging. This feature was also not available in the beta.

· Escape sequences like (%0A%0D) can now be used in deny rules allowing to deny CTRLF and other sequences involving non-printable characters.

How can URLScan be setup? URLScan can be setup up either as a global filter or a site level filter. A global filter is triggered for every HTTP request sent to the server. Site level filters are only invoked for HTTP requests sent to particular sites on a IIS server. Starting with URLScan 3.0 site filters can be used in conjunction with global filters.

Where can I get more information?

URLScan 3.0 FAQ

Using URLScan

Common URLScan Scenarios

Streaming Media with Server 2008

David Tesar — Thu, 08 May 2008 05:14:00 GMT

I’ve always been intrigued on the idea of streaming my own music collection from my home server, so I decided to write this post on technology which can make this happen. If you’re running any version of Server 2008 other than the version for Itanium-based systems, you have the capability of using Windows Media Services and/or IIS7’s Media pack to stream your audio / video (media) content. What’s the difference and which should I use?

Windows Media Services – This enables you to stream media using the “mms” prefix in your player of choice and this method is commonly referred to as a media streaming server. You have the ability to broadcast media or setup on-demand publishing. To make this work, you must install the Media server role and after this download and install media services.

Some key benefits over IIS7 Media pack

Stream content using multi-cast
Proxy/Cache the stream and other options for bigger scale streaming operations
Broadcast media in addition to on-demand playback
More efficient utilization of network bandwidth by adjusting to network conditions

File formats supported : .asf, .wma, .wmv, .mp3 (with use of the MP3 media parser plug-in & doesn’t support VBR files), .jpg, .nsc, .wsx

Media Pack for IIS7 – This enables you to stream media using a method referred to as progressive download (or using a web server), This means the media is downloaded to the client machine, playing via some type of a client such as Windows Media Player, and often beginning to play before the file is completely downloaded. This method only allows you to setup on-demand playback.

The media pack includes two components: Bit Rate Throttling and Web Playlists; both of which must be installed separately on top of IIS7.

Benefits over Windows Media Services

Additional file formats officially supported for .avi, .flv, .mov, .rm, .mp4, and .rmvb with throttling, but any file format could potentially work.
Easily push out the configuration using the shared hosting capabilities of IIS7
Granularly configure bit rates for specific files/folders
Delegate permissions for others to modify the settings for specific files/folders

File formats supported: .asf, .avi, .flv, .mov, .mp3, .mp4, .rm, .rmvb, .wma, .wmv.

Conclusion: If you have a very large amount of content you want to stream, then you’ll definitely want to use Windows Media Services due to the options available to scale and save bandwidth. However, IIS7’s media pack may be the right option for you if you’d like to stream the additional file formats and gain all of the benefits of being integrated with IIS7. For another great comparison between the two media streaming methods, see Chris Knowlton’s blog post.

Get started

IIS7 Media Pack - Bit Rate Throttling
IIS 7 Media Pack – Web Playlists
Windows Media Services Deployment Guide
Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008 (http) (doc version)

External Web Application Management Using IIS 7

Joey Snow — Mon, 17 Mar 2008 07:01:00 GMT

One service that typically requires remote administration by external consultants or application developers are web servers. In this 7 minute screencast MVP Corey Hynes takes us through the new managment service in IIS 7 that addresses the need to delegate remote administration while maintaining the security of your web server.

Getting PHP to perform on IIS7

Dave Northey — Wed, 02 Jan 2008 16:00:00 GMT

I've been showing this demo to people in Ireland for while now & thought I'd better share it with a wider audience before I lose it (I'm going to wipe my demo laptop soon & reload it with Windows Server 2008).

Enjoy,

Dave.

Failed Request Tracing in IIS7

Neil Hutson — Fri, 23 Nov 2007 17:00:00 GMT

In this screencast, Ryan Dunn configures IIS7 server for Failed Request Tracing (sometimes called FREB). Failed Request Tracing is a powerful new capability in IIS7 that allows us to easily set rules on our web applications, that once triggered will log that request to disk and pull in all the relevant trace information. This feature is immensely useful for troubleshooting running applications where attaching a debugger is impractical.

Installing PHP Applications on IIS7

Neil Hutson — Thu, 22 Nov 2007 17:00:00 GMT

In this screencast, Ryan Dunn shows how easy it is to get PHP up and configured on your IIS7 webserver using FastCGI. The popular PHP-based blogging application, Wordpress, is used to demonstrate.

Additionally, we see how quickly and easily we can integrate a PHP app with IIS7's integrated pipeline as we convert Wordpress to use IIS7's built-in Forms Authentication.

Remote Administration and Delegation in IIS7

Neil Hutson — Wed, 21 Nov 2007 23:27:00 GMT

In this screencast, Ryan Dunn configures a IIS7 server for remote administration and delegation. The remote administration service in IIS7 is a new and powerful feature that allows us to connect securely to our remote IIS server using a firewall-friendly SSL connection. Additionally, we can choose to use traditional Windows accounts for authentication or choose the new IIS Manager user accounts instead.

We will walk through the steps you must perform as the IIS administrator as well as the experience for a remote administrator using delegated features.