IIS user count and security breach?!

Hi guys,

Ive been using IIS for a few years now, but today I have been logging on to the scripts I have written and the browser window says that it cannot connect to the pages because there are too many ppl connected to the service.

This seems unbelieveable, since I am the only user of the computer, and the things arent open (supposedly) to the rest of the internet!

I am worried that a remote script or user can access my computer though a vulnerability provided by IIS.

Is there a way that I can limit access to only allow my username on?

Also, it looks like my IIS is set to monitor activity and record it to log files - I would like to look over them but I cant find where they are!! Can someone point out their location to me?

Thanks for any help guys, bit worried about this one!

Porky

You can set up a performance monitor to track asp sessions and see if they are coming from what you're doing (the likeliest cause) or somewhere else (doubtful if your system is adequately secured).

Hi,

I guess you are using Windows XP. If YES then there is connection limititation for Windows XP - It allows 10 simultanous connection.

If you are not using windows xp then check event logs it should generate some event id in there.

In all windows OS you can find the logs for IIS at following Location:
c:\Windows\system32\logfiles\

And To resolve this issue you could run "iisreset" command from command prompt which will release all connections made to iis.

Also check if there is connection limit set on default website.
By default it is set to unlimited.

HTH.
Ganesh

Thanks guys, very helpful - Ill check it out and post my results on here!

Thanks again,

Porky