Download Troubleshooting Internet Information Server

Troubleshooting Security
231
Internet. For example, you might permit HTTP traffic to move through the
firewall, but prohibit FTP traffic. Firewalls can also be used to filter and block
traffic originating from networks or hosts known to be insecure.
If users cannot gain access to IIS resources from the Internet (assuming
you want them to), check to see that the firewall is configured to allow such
access. In some cases, your network’s firewall might be so restrictive that traffic is not permitted to pass between the IIS and the outside world. If such
access is desired, you might consider moving the IIS outside the network and
beyond the firewall.
Troubleshooting Anonymous Access
Anonymous access is a method of permitting unknown users to access your
Web or FTP server directories. Typically, such users supply the user ID anonymous and, as a courtesy, their email addresses as passwords. Under IIS, the
IUSR_<server_name> account is used to permit this type of access. As shown
in Figure 7.21, you can establish anonymous user permissions for this
account using Windows NT Server’s User Manager for Domains application.
If the IUSR account (or whichever account you might have reconfigured for this purpose) is disabled or deleted, then only registered users of the
Figure 7.21
Accounts Permitting Anonymous Access in User Manager for
Domains.