It is the abbreviation for Internet Information Services. IIS is a file and Web application server that can be used on a local area network (LAN), a wide area network (WAN), or the Internet. IIS can be installed on Windows Server 2008/R2, Windows Server 2012/R2 server; scaled-down versions are available for Windows 7, Windows 8 and Windows 8.1.

To make things simple. when you a finish developing a website and you want to publish it online, you need to host in on a public server to be accessible online from anywhere.

So simply IIS allows you to host your websites (basically ASP .NET websites) on your server.

I created a 30 minutes Video, Explaining everything about IIS, you can check out if you want:

https://softexiacrack.com/

IIS 7.5 still offers a top notch solution that offers web sites all the hosting capabilities and the ability to integrate multiple other languages. Pricing has adjusted heavily in the recent years due to competition.

https://crackedwin.com/

IIS is easy to configure, quick to get up and running. There is plenty of options for creating scripts to handle regular tasks, work with multiple sites, SSL, etc. etc. IIS can also handle other types of requirements like FTP, etc.

One of the most powerful features of IIS is the ability to work with PowerShell so everything can be scripted and automated by setting it to a schedule.

https://crackedfull.org/

In IIS 10 i have running a website on port 4553. locally this website runs fine. Because i want to expose this website to the endusers, i need to:

1. make it available through Azure Application gateway
2. Route port 4553 to 443 using a deeplink in the url, because the proxy of the end-user only allows traffic through port 443. I can't make port 443 default for the IIS solution, because port 443 is already occupied for another web solution.

I got this all working:

• https://localhost:4553 --> local on VM works
• https://external.website.com/iis/solution/ --> is reachable and does show the landing page, but the paths are not correctly.

the landing page for example contains:

@Scripts.Render("~/bundles/modernizr")
@Scripts.Render("~/bundles/jquery")<script src="~/Scripts/jquery.dataTables.min.js"></script>

AAG/IIS doesn't understand this path. Although the landing page do work, IIS tries to find the jquery scripts for example in "https://external.website.com/Scripts/jquery.dataTables.min.js" while it should be "https://external.website.com/iis/solution/Scripts/jquery.dataTables.min.js" So the script doesn't respect that adding of"iis/solution" in the url.

When i manually change it to

<script src="~/iis/solution/Scripts/jquery.dataTables.min.js"></script>"

it does work.

But it's too much to change this for all html and other source files. Plus it can't make these changes each time the IIS solution does need an update.

My question; is there something on a higher level which i can change in the IIS settings or in the landing page, which makes sure the file is taken from the right path? Or is it an option to change the physical path for example?

Thanks in advanced.

Newbie here.

Trying to publish a webpage on the Internet through IIS from Windows 10 pro.

The webpage is opening only on the devices connected to the home router. I have tried

a) using the IP for the website as both PC's IP (not the public IP, the inet address) followed by the port, and

b) IP as "All Unassigned" in the Bindings.

I have also added an exception for the port in Windows Firewall as well as set up a port forwarding for that port in the router.

Please tell me what am I missing here?

How to publish the webpage over the Internet?

I am trying to publish some internal use only asp.net projects to a server on our lan. There are several aspects of this that I'm confused about.

Using vs 2017, webdeploy successfully published the site. However when I try to access the site, I get a 404 error. I get this error regardless of whether I spec the ip address of the server, and/or the default.aspx page, or index.html which I manually created for testing purposes after this issue arose.

What is particularly noteworthy is that while the project has been published to c:\inetpub\box on the server (2012 r2), the 404 error lists the physical path as c:\inetpub\wwwroot\box, which does not exist.

I suspect that the issue may be that I misunderstand how to configure what I'll call a "subsite". I would like several asp.net projects to be published on this server, at addresses like

http://myserver/box

http://myserver/contact

the root website, http://myserver, might just contain a page with links to the subsites.

I can reach http://myserver and it shows the default.aspx that I have in wwwroot, which is a good indication that wwwroot is regarded as the go-to site for iis.

In IIS I created the new website box and the physical path there is listed as c:\inetpub\box

There are other websites on the same server from earlier tests. All of them run on port 80.

The 404 error message shows off the incorrect physical path c:\inetpub\wwwroot\box, it seems that wwwroot somehow has precedence and gets injected into url request like http://myserver/box. How do I adjust this?

here is my _Layout.cshtml file. What i am doing wrong? Please Help!

<!DOCTYPE html>

<html>
<head>
<meta name="viewport" content="width=device-width" />
<environment include="Development">
<link href="~/css/bootstrap.css" rel="stylesheet" />
<script src="~/lib/jquery/jquery.js"></script>
<script src="~/lib/twitter-bootstrap/js/bootstrap.js"></script>
</environment>

<environment exclude="Development">
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"
integrity="sha384-Vkoo8x4CGsO3+Hhxv8T/Q5PaXtkKtu6ug5TOeNV6gBiFeWPGFN9MuhOf23Q9Ifjh"
crossorigin="anonymous">
asp-fallback-href="~/css/bootstrap.min.css"
asp-fallback-test-class="sr-only"
asp-fallback-test-property="position"
asp-fallback-test-value="absolute"
asp-suppress-fallback-integrity="true"
</environment>

<link href="~/css/site.css" rel="stylesheet" />

<title>@ViewBag.Title</title>
</head>
<body>

<div class="container">
<nav class="navbar navbar-expand-sm bg-dark navbar-dark">
<a class="navbar-brand" asp-controller="Home" asp-action="Index">
<img src="~/images/employees.jpg" height="30" width="30" />
</a>

<button class ="navbar-toggler" type="button" data-toggle="collapse"
data-target="#collapsibleNavbar">
<span class="navbar-toggler-icon"></span>
</button>

<div class="collapse navbar-collapse" id="collapsibleNavbar">
<ul class="navbar-nav">
<li class="nav-item">
<a class="nav-link" asp-controller="Home" asp-action="Index">List</a>
</li>

<li class="nav-item">
<a class="nav-link" asp-controller="Home" asp-action="Create">Create</a>
</li>
</ul>
</div>
</nav>

<div>
@RenderBody()
</div>

@if (IsSectionDefined("Scripts"))
{
@RenderSection("Scripts", required: true)
}
</div>
</body>
</html>

Hi,

We are facing issue on windows 2016. The issue is when more than 15-20 users request token the W3wp (IIS 10) and lsass.exe using 100% CPU. By monitoring using WPA and Network Monitor we saw TLS handshake happening for each request.

I have checked numerous articles which mentioned about getting better performance with TLS session resumption. I don't get clear answer how to do enable TLS session resumption in IIS 10 on Windows 2016.

Is TLS session resumption related to high CPU? What I mean to say is if we implement TLS session resumption will it affect CPU usage?

Thanks

How come Web Platform Installer is failing to install the IIS Compression module (failing signature verification) when the file it allows you to directly download (from install dialog, prerequisites tab) is the exact same as the one found at https://iis.net/downloads/microsoft/iis-compression

Only older WinCache (for previous PHP versions) seems to exist on Web Platform Installer

going to https://www.iis.net/downloads/microsoft/wincache-extension and pressing Install this extension takes one to

https://webgallery.microsoft.com/gallery where they can't find WinCache at search

if one presses additional downloads instead goes to https://www.iis.net/downloads/microsoft/wincache-extension#additionalDownloads

where they can find older versions

clicking there to view source takes one to

https://pecl.php.net/package/WinCache

where they read that it has been superceded by:

https://sourceforge.net/projects/wincache/

taking a look at this discussion

https://forums.iis.net/t/1242776.aspx?+Pre+Release+WinCache+for+PHP+7+3+and+PHP+7+4alpha1

one seems mentions of a working 7.4 version that you can find at 

https://sourceforge.net/projects/wincache/files/latest/download if you select to see development downloads, that is https://sourceforge.net/projects/wincache/files/development/

getting 

https://sourceforge.net/projects/wincache/files/development/wincache-2.0.0.8-dev-7.4-nts-vc15-x64.exe/download

from there I get a self-extracting executable that some engines at VirusTotal.com warns about (and some third-party sandbox tool virusTotal has available on the report shown for that file claims it tries to open registry keys it shouldn't), so I unpacked with 7-zip instead and check each file at virustotal with no warnings. I tried to follow the instructions there, but still it won't work (or I'm doing something wrong)

If it does work, would be much nicer to have this via Web Platform Installer instead of doing manual work

I just copied a bunch of websites to a new server, but whenever I try to change any settings for those sites in IIS I get an error saying that IIS could not retrieve the data from the web.config. For instance, if I click on Default Documents I get a pop up error saying that an error occurred and listing the web.config for the site as the problem with no additional information. Then in the upper right hand corner of IIS it says "could not retrieve the default documents." 

I though this might be due to a permissions problem, but the error persists even after giving the IIS_IUSRS account full permission.

I am using IIS10 with tomcat server via isapi.

However, after restarting IIS, the webpage throws 500 errors.

After reconnecting, the connection is established normally.

The problem above occurs after some time has elapsed.

I'm attaching a log to fix this.

- Connect

2020-04-28 01:21:45 W3SVC1 192.168.35.3 GET / - 80 - 158.213.242.40 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 500 19 5 1062

- Reconnect
2020-04-28 01:21:49 W3SVC1 192.168.35.3 GET /jakarta/isapi_redirect.dll - 80 - 158.213.242.40 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 15

Hi All,

Our website hosted in 4 servers. all are windows and application hosted in IIS. Due to security concerns, soon we are planning to remove port 80 from server. We don't want to lose our customers. If they bookmarked ourhttp://website then it wil not be available after we removing Port 80. What will be the solution for this? 

Once we removed Port 80, If someone trying to open http://website , then i should automatically redirect tohttps://website.

Kindly help on this

Hi everyone,

My ASP.NET site works fine on windows and IIS 10 and I can view it by typing "localhost" on the browser's address bar.

But if I try to visit the same site from a computer inside the LAN (typing the ip address of the IIS server on the browser), the browser replies with the 404 error page.

I turn off the firewall and I give "everyone" read and write power to the sharing properties of the site folder but nothing happens.

Can someone help me?

Thanks.

GP

Microsoft recently announced TLSv1.3 support for Windows Server 1903 here.  I'm trying to test it out using IIS10 but having issues - has anyone else attempted to get this working?

To enable TLSv1.3, I created SCHANNEL registry keys and rebooted the server.  After the reboot, IIS seems unable to negotiate the session.

CURL output:

curl -vvvv https://192.168.1.15
* Rebuilt URL to: https://192.168.1.15/
*   Trying 192.168.1.15...
* TCP_NODELAY set
* Connected to 192.168.1.15 (192.168.1.15) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (OUT), TLS alert, Server hello (2):
* error:1417106E:SSL routines:tls_process_server_hello:bad extension
* stopped the pause stream!
* Closing connection 0
curl: (35) error:1417106E:SSL routines:tls_process_server_hello:bad extension

Systeminfo:

Host Name:                 WIN-K0U7F6LQGT1
OS Name:                   Microsoft Windows Server Standard
OS Version:                10.0.18362 N/A Build 18362
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Standalone Server
OS Build Type:             Multiprocessor Free
Registered Owner:          Windows User
Registered Organization:
Product ID:                00431-30000-00000-AA825
Original Install Date:     4/25/2020, 5:47:59 PM
System Boot Time:          4/27/2020, 6:45:13 PM
System Manufacturer:       VMware, Inc.
System Model:              VMware7,1
System Type:               x64-based PC
Processor(s):              2 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2600 Mhz
                           [02]: Intel64 Family 6 Model 45 Stepping 7 GenuineIntel ~2600 Mhz
BIOS Version:              VMware, Inc. VMW71.00V.9694812.B64.1808210100, 8/21/2018
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume2
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-08:00) Pacific Time (US & Canada)
Total Physical Memory:     8,191 MB
Available Physical Memory: 7,320 MB
Virtual Memory: Max Size:  10,111 MB
Virtual Memory: Available: 9,345 MB
Virtual Memory: In Use:    766 MB
Page File Location(s):     C:\pagefile.sys
Domain:                    WORKGROUP
Logon Server:              N/A
Hotfix(s):                 4 Hotfix(s) Installed.
                           [01]: KB4532938
                           [02]: KB4513661
                           [03]: KB4528759
                           [04]: KB4528760
Network Card(s):           1 NIC(s) Installed.
                           [01]: Intel(R) 82574L Gigabit Network Connection
                                 Connection Name: Ethernet0
                                 DHCP Enabled:    Yes
                                 DHCP Server:     192.168.1.1
                                 IP address(es)
                                 [01]: 192.168.1.15
                                 [02]: fe80::a825:948e:6374:f681
Hyper-V Requirements:      A hypervisor has been detected. Features required for Hyper-V will not be displayed

Good Afternoon,

Is there a way to retrieve the names of all iis farm web servers, from a hosted site's web app in the farm using C#  ?.

Particularly, a IIS ARR farm. 

We have just setup our IIS 8.5 as our web server. We do have a few weblogic application server behind the web server.

There is one issue with 1 application whereby our user is shown a list of files to download.

The application server example URL is  https://test123.edu/filesrepos/ and there are a list of files shown for example. On clicking on one of the files, it will open a new page. The url forward slashes is change to %2f and the user will not be able to access that file. Example below

https://test123.edu/filesrepos/JAN2020%2FFinance%2FOrientiation%20Programe.pdf

If i manually change the %2F to /, the file will be able access. (https://test123.edu/filesrepos/JAN2020/Finance/Orientiation%20Programe.pdf)

From the logs, if the url is with %2F, it never really hit the weblogic server so I guess the problem lies with IIS not able to accept %2F.

Is there a way in IIS to allow encoded forward slashes? Or need to write a inbound rule? Any help appreciated

Thank you

Jim

I Created a web.config file to redirect old site pages to new site pages within the site but there are two issues:

1. 1. The current http to https rule stops working after adding the rewritemaps option
2. 2. From the list of links on the rewritemaps list only the first two redirects work, the other two does not work.

I use the IIS 10 rewrite package  to create the web.config file.

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <rewrite>
            <rules>
                <rule name="SecureIndexPage" patternSyntax="ECMAScript" stopProcessing="true">
                    <match url="^$" />
                    <action type="Redirect" url="https://www.publicdefender.com/home.asp" appendQueryString="false" redirectType="Found" />
                </rule>
                <rule name="All requests secure redirect" stopProcessing="true">
                    <match url="^.+$" />
                    <conditions>
                        <add input="{HTTPS}" pattern="OFF" />
                    </conditions>
                    <action type="Redirect" url="https://www.publicdefender.com/{R:0}" logRewrittenUrl="true" redirectType="Permanent" />
                </rule>
                <rule name="Redirect rule1 for oldsite">
                    <match url=".*" />
                    <conditions>
                        <add input="{oldsite:{REQUEST_URI}}" pattern="(.+)" />
                    </conditions>
                    <action type="Redirect" url="{C:1}" appendQueryString="false" />
                </rule>
            </rules>
            <rewriteMaps>
                <rewriteMap name="oldsite">
                    <add key="/volunteer.asp" value="/public-defender/volunteer.asp" />
                    <add key="/contact.asp" value="/public-defender/contact.asp" />
                    <add key="/employees.asp" value="/public-defender/employees.asp" />
                    <add key="/donate.asp" value="/public-defender/donate.asp" />
                    <add key="/work.asp" value="/public-defender/work.asp" />
                    <add key="/location.asp" value="/public-defender/location.asp" />
                    <add key="/maps.asp" value="/public-defender/maps.asp" />
                    <add key="/clients.asp" value="/public-defender/clients.asp" />
                </rewriteMap>
            </rewriteMaps>
        </rewrite>
    </system.webServer>
</configuration>

Hello, I have configured my web server for OCSP Stapling by following the steps described in this article: https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings

But I still have two questions:

a) how does the serve receive requests from endpoints to obtain OCSP responses?

b) how does the server fetch OCSP responses to supply to endpoints?

Any help would be greatly appreciated.

I hope this one goes to the right place :)

I like to receive an email notification when an IIS AppPool change it's status.

Here is what I achieved:

1. Created a scheduled task on this event:
   <Query Id="0" Path="Microsoft-IIS-Configuration/Operational">
   <Select Path="Microsoft-IIS-Configuration/Operational">*[System[Provider[@Name='Microsoft-Windows-IIS-Configuration'] and EventID=29]]
      </Select>
</Query>
2. Add an action to call a powershell script which send an email to my email address.
3. Exported it, and add some ValueQuery like this:
   <Value name="Computer">Event/System/Computer</Value>
<Value name="Configuration">Event/EventData/Data[@Name='Configuration']</Value>
<Value name="EditOperationType">Event/EventData/Data[@Name='EditOperationType']</Value>
<Value name="EventID">Event/System/EventID</Value>
<Value name="Logged">Event/System/TimeCreated/@SystemTime</Value>
<Value name="NewValue">Event/EventData/Data[@Name='NewValue']</Value>
<Value name="OldValue">Event/EventData/Data[@Name='OldValue']</Value>

4. Delete the old task, and imported the modified XML
5. Stop an application pool.
6. Two events logged by windows, The first one has an event data entry EditOperationType=3 and the second one has the value of EditOperationType=1

Now here is my problem. Only the first event send a notification email to me, but I'm interested only in the second one.

To be clear, in the first email there are boolean values in the OldValue and NewValue fields, in contrast the second event has the Starting, Stopped, etc... values about the current state change of an application pool.

What happens here? Both events are logged by the windows event handling system. My email sender is rock solid, I use it sereval places without any problem :)

Somehow the second event do not fire up the scheduled task. Why? It is fired up too fast after the first one? Help, me please!

UPDATE: The first scheduled task prevents to start the second one. Now I set to queue the taskm and now I recived my second email. Now, how to get rid of first one? By be more specific in event filter? But how?