The focus-ms list is hopping a little regarding some strange behaviour from
IIS.

The symptoms:
IIS continues to run (or sometimes crashes), but the common thread is that
the port is closed.

After recieving a report on focus-ms, and having this same behaviour occur
on one of our webservers, I contacted a friend who runs a (logically) nearby
network. He indicated that the same problem had occurred on some of thier
servers.

I'm currently pouring over logs attempting to locate anything out of the
ordinary.

Just a note for all those that will say "make sure you've applied patches or
run the hfnetchk:" Our servers are at completely current patch levels.

Keith T. Morgan
Chief of Information Security
Terradon Communications
keith.morganterradon.com
304-755-8291 x142

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]