Spencer Ruport of netortech.com modified my FTP ban script into one that stops dictionary attacks. And he chooses not to ban via the problematic IIS way but instead creating a bad route for the offending IP address. Pretty darn ingenius. 1Set objFTPSVC = GetObject("IIS://localhost/MSFTPSVC") 2Set objFSO = …

Note (2025): This post targets legacy IIS FTP on Windows 2000/2003 (IIS 5/6). Those platforms are long out of support and the approach below is preserved for historical reference. For modern Windows Server and IIS FTP, prefer built-in controls such as IP and Domain Restrictions, Windows Defender Firewall rules, and …

I recently loaded up one of my servers and out of nowhere, I ran into this error: Server Configuration Error The server has encountered a configuration error attempting to process your request. The configuration parameter MD_CUSTOM_ERROR (6008) has an invalid value. Please contact the server administrator for …

Using a Custom 404 error script in IIS makes it possible to emulate a very basic URL rewrite. Sample Environment IIS 6 Website domain: "www.me.com" URLRewrite directory: "code" Steps Create a file named rewrite.asp in the code directory. Add a Custom Error for the 404 Not Found. Open up IIS -> …

I dug up this cold from my old netnerds blog. For Googlers wondering if sustaining a remote session is possible, the answer is yes; I've sustained remote cookie sessions using both ASP & VBScript. I've provided simplified code below. It should be self explanatory. If not, drop me a comment and I'll explain it. …

I used the following code a while back as part of a solution to automate the banning of spammers via their IP address. 1'Here, we will pretend this is an imported list 2Dim XMLarr(1) 3XMLarr(0) = "65.19.238.21" 4XMLarr(1) = "198.31.175.100" 5 6Set objIIS = GetObject("IIS://localhost/w3svc") …

This script should work right out of the box. Note (2025): MSXML 4.0 is long deprecated and no longer supported. If you try this on a modern system, prefer MSXML 6.0 (for example: MSXML2.XMLHTTP.6.0 and MSXML2.DOMDocument.6.0). The example below reflects the original 2006 code for historical accuracy. 1<% 2Call …

Find IIS Servers on your domain (or with modifications, your subnet) using this script Note (2025): This is an archival VBScript from 2006 that relies on legacy technologies (ADSI and MSXML HTTP) and domain browsing via the WinNT provider. VBScript and these approaches are considered legacy on modern Windows and may be …

I love parsing through IIS logfiles but I dislike the directory structure that Microsoft creates for IIS logging. Each site has a randomly generated directory name so, for example, "netnerds.net" could store its files in "C:\windows\system32\logfiles\W3SVC720199813." Who wants to track that down? …