Results 1 to 6 of 6

Thread: IIS 6 Win2003 server - ZA blocks incomming port 80

  1. #1
    leauk Guest

    Default IIS 6 Win2003 server - ZA blocks incomming port 80

    ZA 5.5.094
    I know Win2003 server isn't supported, but just wondered if others have come across this one?
    Even though inetinfo.exe (the IIS service) and the
    IIS worker process w3wp.exe both have full access (Trusted & Internet) ZA still blocks incoming port 80 requests.
    The only way I can get them through is to set an Expert rule to allow ALL incoming port 80s.
    This seems to me like there is a service/app that
    ZA hasn't detected
    and I need to configure it manually - but I don't know which.
    I've even ensured the ZA service
    is alive before
    inetinfo.exe by using DeponOnService reg key - still no difference.


    I know ZA 4.0 works fine on W2K Server and IIS 5, as it's curernt serving several of my web sites :-)

    Any thoughts?
    CheersLea



    Operating System:Windows 2003 Server
    Product Name:ZoneAlarm Pro
    Software Version:5.x

  2. #2
    leauk Guest

    Default Re: IIS 6 Win2003 server - ZA blocks incomming port 80

    No-one?
    Am I in the correct forum group??


  3. #3

    Default Re: IIS 6 Win2003 server - ZA blocks incomming port 80

    First things first, ZA
    5.5 wasn't designed to work Windows 2003 server which is quite different to the old 2000 servers.
    Now, what loads first? IIS6 or ZA? Might need to force IIS6 to load before ZA. IIS will grab port 80 (or another port you specify by default) when it loads and not release it. If ZA loads first, it might deny IIS access to port 80 by default.

    Message Edited by Jeruselem on 10-08-200612:56 AM

  4. #4
    leauk Guest

    Default Re: IIS 6 Win2003 server - ZA blocks incoming port 80

    Hi
    Many thanks for the reply.
    I've upgraded
    to 6.5 and still need an expert rule.
    I've forced inetinfo
    to wait for vsmon but doesn't seem to help.
    It still needs a expert rule to allow all port 80 requests in.
    I can see ZA is blocking/accepting these with/without the rule by using the log view.
    inetinfo has full access under Program Control and so does IIS worker process.
    I'm going to work through the 15 or so IIS related dlls to see if any of these need permissions using the component Access section.
    CheersLea



  5. #5
    absholution Guest

    Default Re: IIS 6 Win2003 server - ZA blocks incoming port 80

    Did you ever find a solution to this?

  6. #6
    absholution Guest

    Default Re: IIS 6 Win2003 server - ZA blocks incoming port 80

    Well since this was never resolved (and with further software ZA conflicts), I switched firewall software. With the other software, I have to setup any rules controlling access to IIS using svchost.exe (wish I didn't since svchost.exe is a generic piece of software, seems like a design flaw is IIS6 to me...). It's odd how even those w3wp.exe runs in its own process, all its network communications are still going through svchost.exe

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •