Tuesday, March 18, 2008
Why do I get "Sorry, too many clients" when trying to connect to PostgreSQL?
How can I enable Microsoft Internet Information Services (IIS) 6.0 to display filenames that have no extension?
Click Start and select Programs, Administrative Tools, Internet Information Services (IIS) Manager.
Expand the Web Sites branch, right-click the Web site for which you want to enable no-extension files, and select Properties.
- Select the HTTP Headers tab and click MIME Types.
- Click New. You'll see the MIME Type dialog box.
- In the Extension text box, enter a period followed by an asterisk (.*).
- In the MIME Type text box, type:
- application/octet-stream
- Click OK.
- Then click OK again to display the Web site's main properties page
When you restart the Web site, you should be able to see and open files that have no extension. (To restart the server, right-click the Web site in IIS and select Stop, then select Start.)
How can I find out which worker processes are connected to the application pools on a server?
• Worker processes that are currently running
• Application pools assigned to the worker processes
• Applications currently running in each worker process
The server must be running a member of the Windows Server 2003 family with IIS 6.0.
How can I harden the TCP/IP stack on my Windows 2003 server against a Denial of Service (DOS) attack?
The following list explains the TCP/IP-related registry values that you can configure to harden the TCP/IP stack on computers that are directly connected to the Internet. All of these values should be created under the following registry key, unless otherwise noted:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
NOTE: All values are in hexadecimal unless otherwise noted.
• Value name: SynAttackProtect
Key: Tcpip\Parameters
Value Type: REG_DWORD
Valid Range: 0,1
Default: 0
This registry value causes Transmission Control Protocol (TCP) to adjust retransmission of SYN-ACKS. When you configure this value, the connection responses time out more quickly during a SYN attack (a type of denial of service attack).
The following parameters can be used with this registry value:
• 0 (default value): Set SynAttackProtect to 0 for typical protection against SYN attacks.
• 1: Set SynAttackProtect to 1 for better protection against SYN attacks. This parameter causes TCP to adjust the retransmission of SYN-ACKS. When you set SynAttackProtect to 1, connection responses time out more quickly if the system detects that a SYN attack is in progress. Windows uses the following values to determine whether an attack is in progress:
• TcpMaxPortsExhausted
• TCPMaxHalfOpen
• TCPMaxHalfOpenRetried
• Value name: EnableDeadGWDetect
Key: Tcpip\Parameters
Value Type: REG_DWORD
Valid Range: 0, 1 (False, True)
Default: 1 (True)
The following list explains the parameters that you can use with this registry value:
• 1: When you set EnableDeadGWDetect to 1, TCP is permitted to perform dead-gateway detection. When dead-gateway detection is enabled, TCP may ask the Internet Protocol (IP) to change to a backup gateway if a number of connections are experiencing difficulty. Backup gateways are defined in the Advanced section of the TCP/IP configuration dialog box in the Network tool in Control Panel.
• 0: Microsoft recommends that you set the EnableDeadGWDetect value to 0. If you do not set this value to 0, an attack may force the server to switch gateways and cause it to switch to an unintended gateway.
• Value name: EnablePMTUDiscoveryKey: Tcpip\ParametersValue Type: REG_DWORDValid Range: 0, 1 (False, True)Default: 1 (True)
The following list explains the parameters that you can use with this registry value:
• 1: When you set EnablePMTUDiscovery to 1, TCP tries to discover either the maximum transmission unit (MTU) or the largest packet size over the path to a remote host. TCP can remove fragmentation at routers along the path that connect networks with different MTUs by discovering the path MTU and limiting TCP segments to this size. Fragmentation adversely affects TCP throughput.
• 0: Microsoft recommends that you set EnablePMTUDiscovery to 0. When you do so, an MTU of 576 bytes is used for all connections that are not hosts on the local subnet. If you do not set this value to 0, an attacker may force the MTU value to a very small value and overwork the stack.
Important Setting EnablePMTUDiscovery to 0 negatively affects TCP/IP performance and throughput. Even though Microsoft recommends this setting, it should not be used unless you are fully aware of this performance loss.
• Value name: KeepAliveTimeKey: Tcpip\ParametersValue Type: REG_DWORD-Time in millisecondsValid Range: 1-0xFFFFFFFFDefault: 7,200,000 (two hours)
This value controls how frequently TCP tries to verify that an idle connection is still intact by sending a keep-alive packet. If the remote computer is still reachable, it acknowledges the keep-alive packet. Keep-alive packets are not sent by default. You can use a program to configure this value on a connection. The recommended value setting is 300,000 (5 minutes).
• Value name: NoNameReleaseOnDemand
Key: Netbt\Parameters
Value Type: REG_DWORD
Valid Range: 0, 1 (False, True)
Default: 0 (False)
This value determines whether the computer releases its NetBIOS name when it receives a name-release request. This value was added to permit the administrator to protect the computer against malicious name-release attacks. Microsoft recommends that you set the NoNameReleaseOnDemand value to 1.
How can I prevent malicious or malfunctioning software clients from consuming resources by using minimal data to hold connections open?
How can I increase the time that services have to shut down?
- Start regedit.exe.
- Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control.
- Double-click WaitToKillServiceTimeout.
- Set this value to the desired wait time in milliseconds—60000 is 1 minute.
- Click OK.
- Close regedit.
- Reboot the machine.
Note that this value applies to ALL services, so setting it to a longer interval might slow your computer's shut down: if a service doesn't shut down correctly, it will have a longer time before the OS halts it.
How can I flush the DNS resolver cache in Windows?
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\>
How can I manage a MySQL database from windows?
Why do I get a black screen when I connect to my Windows server via RDP (Remote Desktop)?
How can I use Application Pools in IIS 6.0 to group together web sites?
- Expand the computer name
- Expand Application Pools
- Create a new application pool by right-clicking Application Pools and selecting New -> Application Pool
- Give the application pool a name. For instance, "HighResourceSites"
- Select "Use default settings for new application pool" - (you can customize it later)
- Click OK
- Expand Web Sites
- Right-click on the respective web site, select Properties
- Click the Home Directory tab
- Near the bottom, change the Application Pool selection to "HighResourceSites"
- Click OK
What ways can I remotely administer IIS in Windows 2003 Server
How to turn off the Shutdown Event Tracker in Windows 2003?
To do so, open the Group Policy Object Editor Console. Click on Start, then Run, and type gpedit.msc and press OK.
Navigate to Computer Configuration > Administrative Templates > System, and in the right hand pane, select the “Display Shutdown Event Tracker” setting.
Double click this setting to open the Properties page. You are now given the option to leave it in a default state of Not Configured, or you can set it to Always Enabled, Enabled for Servers/Workstations (Windows XP Pro) or Disabled.
Note:When you enable the Group Policy for Server only, the Shutdown Event Tracker appears when you shut down a computer running Windows 2003, whereas for Workstation only, the Shutdown Event Tracker appears when a computer running Windows XP Professional is shut down.
After you make the change to the Group Policy, open the Command Prompt (Either through Start > Programs or Start > Run > cmd.exe) and run
gpupdate /force
to refresh the policy and have your settings be applied straight away. Alternatively, you can just restart the machine.
When you next attempt to shutdown or restart the machine, the Shutdown Event Tracker will no longer be visible and the normal shutdown prompt will appear.
How can I setup FTP in IIS such that users are in their home directory when they login?
I am getting the following error when I FTP into my server: "home directory inaccessible". How can I fix this?
I have installed IIS SMTP, but it does not appear in IIS Manager?
After the installation of the SMTP service on Windows Server 2000/2003, the SMTP tree may not appear in the IIS Manager console.
Click the "Start" button, then "Run…" and type:
regsvr32 %systemroot%system32inetsrvsmtpsnap.dll
Alternatively, %systemroot% can be replaced with the drive Windows Server 2003 is installed on (i.e. C:\Windows\ )
How do I configure Perl/CGI to work with IIS?
How can I schedule my Windows server to reboot automatically?
Create a new directory on your server, named "C:psshutdown". Place psshutdown.exe into that directory.
Create a file named "shutdown_now.bat" in that same directory.
The file should only have one line:
C:\psshutdown\psshutdown.exe -r -f -c -t 10
The "10" represents the number of seconds to delay before actually rebooting.
To schedule the reboot for every Sunday at 11:00pm, type the following at a command prompt:
at 23:00 /every:su "C:psshutdownshutdown_now.bat"
How can I tell how many client computers are connected to my Web server?
Open Performance Monitor: (Click Start -> Settings -> Control Panel -> Administrative Tools -> Performance)
- Right-click the graph, select Add Counters
- Change the Performance Object to "Web Service"
- Highlight "Current Connections"
- Click OK
How do I add default documents to a website in IIS?
How can I use CDONTS on my Windows 2003 Server?
How can I use ASP to send mail using CDOSYS?
.From E-mail address of the sender
.To E-mail address of the recipient
.CC E-mail address of the CC recipient
.Subject Subject of the message
.TextBody Body of the message in plain text
.HTMLBody Body of the message in HTML
.Send Calling this method the message is sent
The following example is the simplest email you can send. As you can see it couldn't be easier..
How do I password-protect a directory in IIS on my Windows server with a specific username and password?
1. Create the user:
Administrative Tools -> Computer Management
Expand Local Users and Groups
Right-click Users, select New User...
Fill in the appropriate fields, be sure to clear the box for \"User must change password at
next logon\".
Click Create
2. Remove anonymous access from the directory that you want to restrict:
Open Internet Information Services (IIS) Manager
Expand Web Sites
Expand the respective web site
Right-click on the directory you want to restrict, select Properties
Click the Directory Security tab
Click the Edit... button
Clear the check for Enable anonymous access
Make sure only Integrated Windows authentication is selected
3. Set the NTFS permissions on the directory:
Within IIS Manager, right-click on the web site name.
Select Open
Right-click on the directory that you\'re restricting, select Properties
Click the Security tab
Click the Add... button
Type the username that you created earlier, click OK
Make sure at least Read & Execute permissions are selected for the user
Click OK until all windows are closed
How do I install Python on my Windows server?
http://www.python.org/doc/faq/windows.html
How do I create a system DSN on my Windows server?
2. Click the System DSN tab, and then click Add.
3. Click the database driver that corresponds with the database type to which you are connecting, and then click Finish.
4. Type the data source name. Make sure that you choose a name that you can remember. You will need to use this name later.
5. Click Select.
6. Click the correct database, and then click OK.
7. Click OK, and then click OK.
How can I utilize the functionality of mod_rewrite on my Windows server?
ISAPI_Rewrite, is basically a port of mod_rewrite, for use with IIS. You can readmore about it at the official website: http://www.isapirewrite.com/
How do I connect to my MySQL server remotely?
This will entirely depend upon the client that you are using to connect with. There are onlytwo things you will need to ensure work for proper functionality. First, you will need to findout if the client you are using supports connections over TCP/IP. Second, you will have toadd a host to your mysql user, to allow connections from the host you are using.
This can be done from within a mysql command prompt like so:
mysql> GRANT ALL PRIVILEGES ON mydatabase.* TO 'myuser'@'myclientip' IDENTIFIED BY 'mypassword';
mysql> FLUSH PRIVILEGES;
How do you remove entries from the Remote Desktop Connection Computer box?
To remove entries from the Remote Desktop Connection Computer box in the Windows Remote Desktop Connection client, start Registry Editor, and then click the following registry key:
HKEY_CURRENT_USERSoftwareMicrosoftTerminal Server ClientDefault
Entries appear as MRUnumber, and are visible in the right pane. To delete an entry, right-click it, and then click Delete.
Close the registry editor.
I want to upgrade my IIS 5 server to IIS 6. How do I?
Why do I get the error "Directory Listing Denied" when attempting to view my webpage?
Directory Listing Denied
This Virtual Directory does not allow contents to be listed.
Your main (index) page should usually be named "index.htm", "index.html", or "default.htm". If one of these files exists, and you're still getting the error, check the following:
Open Internet Information Services (IIS) Manager.
Expand the respective web site.
Right-click on the directory that is giving this error (if it's the main URL, just right-click on the web site), select Properties.
Select the Documents tab, check the box for "Enable default content page"
Click the Add button, and add the index page that you're trying to browse to.
Terminal Server has reached maximum connections allowed
This will connect you to the console session of Windows Server 2003. If there is an error when you run mstsc /console, you must upgrade your termnial server clientto version 5.1
On the server, goto start, then administrative tools, and finally terminal server manager. This will show you who is logged into the server. You can then right click ona user and select disconnect or reset.
After you disconnect the other connection, you may close your connection, and log back in.
Is it possible to hide the identity of my Web servers by removing or revising the banner information that is returned with a request?
IIS 6.0 will not serve my .shtml files. How can I fix this?
Is it possible to configure IIS to save log entries in local time?
No. The standard outlined in the W3C Extended format specification dictates that W3C Extended logging use Coordinated Universal Time (UTC).
IIS is not listening on all IP Addresses
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\ListenOnlyList
You can remove this key, and this will set it by default to listen on all ip addresses.
My server is running out of disk space. How do I compress a directory and its contents?
Is it possible to run the Backup Utilities from the command line in Plesk for Windows?
Unfortunately it is impossible with the current version of Backup Utilities. However, you can use this trick:
2) The configuration of scheduled backup will be saved into file
%plesk_dir%\backup\backup_schedule.psc
3) To use this configuration file run the following command from the command line:
%plesk_bin%\backup.exe --config-file %plesk_dir%\backup\backup_schedule.psc
Plesk backup will be run in background mode.
What is the easiest way to find out when my server was last rebooted?
Type: command
Click OK
Type: net statistics server
The line that begins with "Statistics since..." contains the last boot time for the server.
Where can I find the latest Windows Remote Desktop Connection software?
http://www.microsoft.com/downloads/details.aspx?familyid=80111f21-d48d-426e-96c2-08aa2bd23a49&displaylang=en
Instructions
1. Click the Download button in the upper right-hand corner of the page to start the download, or choose a different language from the drop-down list and click Go.
2. Do one of the following:
* To start the installation immediately, click Open or Run this program from its current location.
* To copy the download to your computer for installation at a later time, click Save or Save this program to disk.
Why do I keep getting asked to install the Windows Update ActiveX Control?
Additionally, you are not prompted to install the ActiveX control no matter what the ActiveX settings are within IE.
Step 1: BACKUP THE REGISTRY
Step 2: Create the file OLE_fix.reg with the following contents:
Code:
REGEDIT4
[HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}]@="ClassMoniker"
[HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}\InprocServer32]@="ole32.dll"
[HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}\ProgID]@="clsid"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\CLSID]@="{0000031A-0000-0000-C000-000000000046}"
Step 3: Merge OLE_fix.reg into the registry (double click or Right Click->Merge)