RE: WMF Vulnerability Script Fix - Attn Jim

  • From: Paul Noble <pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 9 Jan 2006 13:25:25 -0000

This is the same issue Joe and myself ran into, but I found on my server it
seemed to just be the additional header entries on 1.1 that caused it to bum
out, cleared the ticks on that and 1.1 is working fine. 

-----Original Message-----
From: Paul Crisp [mailto:pcrisp@xxxxxxxxxxxxxxxxx] 
Sent: Monday, January 09, 2006 10:53 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] WMF Vulnerability Script Fix - Attn Jim

http://www.ISAserver.org

Hi Jim
 
Ok, i confirmed to you on Friday 6th that your new script was working with
my firewalls without a problem. I then noticed that a newer version was
posted so updated my firewalls this morning, now after 10mins the Microsoft
Firewall service crashes with the following two messages in the event log:
 
The Firewall service stopped because an application filter module C:\Program
Files\Microsoft ISA Server\HttpFilter.dll generated an exception code
C0000005 in address 60FF647F when function CompleteAsyncIO was called. To
resolve this error, remove recently installed application filters and
restart the service. 
 
Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0,
faulting module httpfilter.dll, version 4.0.2163.213, stamp 420bdb2f, debug?
0, fault address 0x0001647f. 
 
I have now removed the filters from both my firewalls and all appears to be
working before ever installing the script
 
Any clues?
 
Regards
 
Paul Crisp
 
 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 


Other related posts: