If you remove the application mappings to the idq.dll then the default.ida will not find anything , correct ? So, it just a case of not allowing the operation to fail at all. BTW, ISA server saved my butt :) We have a T-1 line with a partner, I had to go to the server building last night to help them find out why they had no access to there mail or web sites. Turns out IIS was turned off, by Code Red 2. They definitely are infected, but my system survived :) Thanks ISA :-) regards, Mark ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, August 10, 2001 9:33 AM Subject: [isalist] Re: stop default.ida ?? > http://www.ISAserver.org > > > Yes: > 1. Use only web publishing (I know; everyone can't do this for one reason or > another) > 2. Use only FQDN in the destination sets; no IP's > 3. Create a DS as: dest = "*", path = "/default.ida" > 4. Create a deny S&C rule using the above DS > > Bear in mind tha if you have to use server publishing to serve you web > site, 3 & 4 may have no effect. > > Jim Harrison > MCP(2K), A+, Network+, PCG > > ----- Original Message ----- > From: "Lars Dávid" <lars@xxxxxx> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Sent: Friday, August 10, 2001 1:29 AM > Subject: [isalist] stop default.ida ?? > > > http://www.ISAserver.org > > > Hello, > > In the IIS logs, I find every day people trying to access "default.ida". > But I don't have any virus on the machine, I have checked > everything/everywhere. It's quite annoying tough. > > Is it possible to stop the "GET / default.ida " in ISA Server?? > > -- > > Yours sincerely, > Lars Dávid > > webdesigner/webprogrammer > DBI e-business solutions AB > http://www.dbi.se > > phone: +46(0)431-446580 > cellular: +46(0)739903089 > fax: +46(0)431-446588 > e-mail: lars@xxxxxx > ICQ: 724091 > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') > > > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > strangconst@xxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub')