MS IIS Setting: HTTP Failed To Connect if Using Machine Name

Dear Experts,

Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my web
application and its for development and testing purpose. Normally I use the
machine name instead of localhost. So, I always use something like,
http://mymachine/MYAPP/application.dll.

But a few weeks ago, I had manually updated the Windows Update, guessing
that it might help me on resolving security vulnerabilities in Windows,
(which I'm not sure what). So after the update, I can no longer use my
machine name and I have to use the localhost instead. Of course this is OK
if I'm working on this machine alone, but I also need to do testing from
other PC directing to this machine as well.

I tried to telnet to port 80, and it failed to establish connection if I'm
not using the name 'localhost'. Looks like it block the usage of port 80 if
I'm using the machine name. Seems to me that this only require a little
twist somewhere,... but I really have no clue where.

I tried to uninstall the whole Windows Update. Tried to stopped windows
firewall, stopped anti-virus, tweak system setting. But all to no avail.

Can anybody here be kind enough to help me?

Thank you.
ahmad [ Di, 28 November 2006 05:43 ] [ ID #1550246 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

No need to cross post to many groups. just IIS will do.
Now - can remote machine ping the servername?
telnet the server port 80 remotely?

If you able to do so, what do you see when test browse a hello.html
remotely?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
> Dear Experts,
>
> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my web
> application and its for development and testing purpose. Normally I use
> the machine name instead of localhost. So, I always use something like,
> http://mymachine/MYAPP/application.dll.
>
> But a few weeks ago, I had manually updated the Windows Update, guessing
> that it might help me on resolving security vulnerabilities in Windows,
> (which I'm not sure what). So after the update, I can no longer use my
> machine name and I have to use the localhost instead. Of course this is OK
> if I'm working on this machine alone, but I also need to do testing from
> other PC directing to this machine as well.
>
> I tried to telnet to port 80, and it failed to establish connection if I'm
> not using the name 'localhost'. Looks like it block the usage of port 80
> if I'm using the machine name. Seems to me that this only require a little
> twist somewhere,... but I really have no clue where.
>
> I tried to uninstall the whole Windows Update. Tried to stopped windows
> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>
> Can anybody here be kind enough to help me?
>
> Thank you.
>
>
Bernard [ Di, 28 November 2006 07:25 ] [ ID #1550247 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

Microsoft IIS 6 on Win XP Pro SP2 ?
How to install IIS6 on Windows XP?


"Ahmad A. Rahman" <ahmad [at] edms.com.my> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
> Dear Experts,
>
> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my web
> application and its for development and testing purpose. Normally I use
> the machine name instead of localhost. So, I always use something like,
> http://mymachine/MYAPP/application.dll.
>
> But a few weeks ago, I had manually updated the Windows Update, guessing
> that it might help me on resolving security vulnerabilities in Windows,
> (which I'm not sure what). So after the update, I can no longer use my
> machine name and I have to use the localhost instead. Of course this is OK
> if I'm working on this machine alone, but I also need to do testing from
> other PC directing to this machine as well.
>
> I tried to telnet to port 80, and it failed to establish connection if I'm
> not using the name 'localhost'. Looks like it block the usage of port 80
> if I'm using the machine name. Seems to me that this only require a little
> twist somewhere,... but I really have no clue where.
>
> I tried to uninstall the whole Windows Update. Tried to stopped windows
> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>
> Can anybody here be kind enough to help me?
>
> Thank you.
>
>
ad [ Di, 28 November 2006 11:30 ] [ ID #1550249 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

OK, its not IIS 6. And you cant install it in XP. My mistake.

Please help resolving the issue.


"ad" <flying [at] wfes.tcc.edu.tw> wrote in message
news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> Microsoft IIS 6 on Win XP Pro SP2 ?
> How to install IIS6 on Windows XP?
>
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>> Dear Experts,
>>
>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>> web application and its for development and testing purpose. Normally I
>> use the machine name instead of localhost. So, I always use something
>> like, http://mymachine/MYAPP/application.dll.
>>
>> But a few weeks ago, I had manually updated the Windows Update, guessing
>> that it might help me on resolving security vulnerabilities in Windows,
>> (which I'm not sure what). So after the update, I can no longer use my
>> machine name and I have to use the localhost instead. Of course this is
>> OK if I'm working on this machine alone, but I also need to do testing
>> from other PC directing to this machine as well.
>>
>> I tried to telnet to port 80, and it failed to establish connection if
>> I'm not using the name 'localhost'. Looks like it block the usage of port
>> 80 if I'm using the machine name. Seems to me that this only require a
>> little twist somewhere,... but I really have no clue where.
>>
>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>>
>> Can anybody here be kind enough to help me?
>>
>> Thank you.
>>
>>
>
>
ahmad [ Di, 28 November 2006 11:40 ] [ ID #1550250 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

How far out of date was this XP on service as obtained from
Windows Update ? Was SP 2 part of the new service applied?

When you say "all to no avail" what do you mean ? that you
could not shut off the firewall or that it made no difference?

That you pull up content with localhost shows that IIS is working.
Use of localhost does not go out the network interface, so either
tcp 80 is not being allowed in or the website is configured with
hostheaders to only allow response when hit upon with certain
host names (like localhost) in use.

"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
> OK, its not IIS 6. And you cant install it in XP. My mistake.
>
> Please help resolving the issue.
>
>
> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>> Microsoft IIS 6 on Win XP Pro SP2 ?
>> How to install IIS6 on Windows XP?
>>
>>
>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>> Dear Experts,
>>>
>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>> web application and its for development and testing purpose. Normally I
>>> use the machine name instead of localhost. So, I always use something
>>> like, http://mymachine/MYAPP/application.dll.
>>>
>>> But a few weeks ago, I had manually updated the Windows Update, guessing
>>> that it might help me on resolving security vulnerabilities in Windows,
>>> (which I'm not sure what). So after the update, I can no longer use my
>>> machine name and I have to use the localhost instead. Of course this is
>>> OK if I'm working on this machine alone, but I also need to do testing
>>> from other PC directing to this machine as well.
>>>
>>> I tried to telnet to port 80, and it failed to establish connection if
>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>> port 80 if I'm using the machine name. Seems to me that this only
>>> require a little twist somewhere,... but I really have no clue where.
>>>
>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>>>
>>> Can anybody here be kind enough to help me?
>>>
>>> Thank you.
>>>
>>>
>>
>>
>
>
Roger Abell [ Di, 28 November 2006 14:58 ] [ ID #1550251 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

No need to cross post to many groups. just IIS will do.
Now - can remote machine ping the servername?
telnet the server port 80 remotely?

If you able to do so, what do you see when test browse a hello.html
remotely?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
> Dear Experts,
>
> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my web
> application and its for development and testing purpose. Normally I use
> the machine name instead of localhost. So, I always use something like,
> http://mymachine/MYAPP/application.dll.
>
> But a few weeks ago, I had manually updated the Windows Update, guessing
> that it might help me on resolving security vulnerabilities in Windows,
> (which I'm not sure what). So after the update, I can no longer use my
> machine name and I have to use the localhost instead. Of course this is OK
> if I'm working on this machine alone, but I also need to do testing from
> other PC directing to this machine as well.
>
> I tried to telnet to port 80, and it failed to establish connection if I'm
> not using the name 'localhost'. Looks like it block the usage of port 80
> if I'm using the machine name. Seems to me that this only require a little
> twist somewhere,... but I really have no clue where.
>
> I tried to uninstall the whole Windows Update. Tried to stopped windows
> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>
> Can anybody here be kind enough to help me?
>
> Thank you.
>
>
Bernard [ Di, 28 November 2006 07:25 ] [ ID #1550262 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

Hi Bernard,

Yes. Remote machine can ping the servername. I had tried telnet to port 80
but looks like it refuse to accept the connection. Even if I tried to telnet
to port 80 on the same machine itself, it still failed, unless I use
localhost. The only way to go to port 80 is by using the name localhost and
on the same machine.

Need to inform you again, that this only happened after I installed the
security update from MS. But I had already uninstalled it, meaning it should
go to the previous state. But apparently, it is still the same, I still
cannot connect to port 80 using the machine name.

There must be something that MS had changed in my OS setting after the
security update installed.

"Bernard Cheah [MVP]" <qbernard [at] hotmail.com.discuss> wrote in message
news:OiFyOYrEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> No need to cross post to many groups. just IIS will do.
> Now - can remote machine ping the servername?
> telnet the server port 80 remotely?
>
> If you able to do so, what do you see when test browse a hello.html
> remotely?
>
> --
> Regards,
> Bernard Cheah
> http://www.iis.net/
> http://www.iis-resources.com/
> http://msmvps.com/blogs/bernard/
>
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> news:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>> Dear Experts,
>>
>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>> web application and its for development and testing purpose. Normally I
>> use the machine name instead of localhost. So, I always use something
>> like, http://mymachine/MYAPP/application.dll.
>>
>> But a few weeks ago, I had manually updated the Windows Update, guessing
>> that it might help me on resolving security vulnerabilities in Windows,
>> (which I'm not sure what). So after the update, I can no longer use my
>> machine name and I have to use the localhost instead. Of course this is
>> OK if I'm working on this machine alone, but I also need to do testing
>> from other PC directing to this machine as well.
>>
>> I tried to telnet to port 80, and it failed to establish connection if
>> I'm not using the name 'localhost'. Looks like it block the usage of port
>> 80 if I'm using the machine name. Seems to me that this only require a
>> little twist somewhere,... but I really have no clue where.
>>
>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>>
>> Can anybody here be kind enough to help me?
>>
>> Thank you.
>>
>>
>
>
ahmad [ Di, 28 November 2006 07:44 ] [ ID #1550266 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

Microsoft IIS 6 on Win XP Pro SP2 ?
How to install IIS6 on Windows XP?


"Ahmad A. Rahman" <ahmad [at] edms.com.my> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
> Dear Experts,
>
> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my web
> application and its for development and testing purpose. Normally I use
> the machine name instead of localhost. So, I always use something like,
> http://mymachine/MYAPP/application.dll.
>
> But a few weeks ago, I had manually updated the Windows Update, guessing
> that it might help me on resolving security vulnerabilities in Windows,
> (which I'm not sure what). So after the update, I can no longer use my
> machine name and I have to use the localhost instead. Of course this is OK
> if I'm working on this machine alone, but I also need to do testing from
> other PC directing to this machine as well.
>
> I tried to telnet to port 80, and it failed to establish connection if I'm
> not using the name 'localhost'. Looks like it block the usage of port 80
> if I'm using the machine name. Seems to me that this only require a little
> twist somewhere,... but I really have no clue where.
>
> I tried to uninstall the whole Windows Update. Tried to stopped windows
> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>
> Can anybody here be kind enough to help me?
>
> Thank you.
>
>
ad [ Di, 28 November 2006 11:30 ] [ ID #1550272 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

OK, its not IIS 6. And you cant install it in XP. My mistake.

Please help resolving the issue.


"ad" <flying [at] wfes.tcc.edu.tw> wrote in message
news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> Microsoft IIS 6 on Win XP Pro SP2 ?
> How to install IIS6 on Windows XP?
>
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>> Dear Experts,
>>
>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>> web application and its for development and testing purpose. Normally I
>> use the machine name instead of localhost. So, I always use something
>> like, http://mymachine/MYAPP/application.dll.
>>
>> But a few weeks ago, I had manually updated the Windows Update, guessing
>> that it might help me on resolving security vulnerabilities in Windows,
>> (which I'm not sure what). So after the update, I can no longer use my
>> machine name and I have to use the localhost instead. Of course this is
>> OK if I'm working on this machine alone, but I also need to do testing
>> from other PC directing to this machine as well.
>>
>> I tried to telnet to port 80, and it failed to establish connection if
>> I'm not using the name 'localhost'. Looks like it block the usage of port
>> 80 if I'm using the machine name. Seems to me that this only require a
>> little twist somewhere,... but I really have no clue where.
>>
>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>>
>> Can anybody here be kind enough to help me?
>>
>> Thank you.
>>
>>
>
>
ahmad [ Di, 28 November 2006 11:40 ] [ ID #1550273 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

How far out of date was this XP on service as obtained from
Windows Update ? Was SP 2 part of the new service applied?

When you say "all to no avail" what do you mean ? that you
could not shut off the firewall or that it made no difference?

That you pull up content with localhost shows that IIS is working.
Use of localhost does not go out the network interface, so either
tcp 80 is not being allowed in or the website is configured with
hostheaders to only allow response when hit upon with certain
host names (like localhost) in use.

"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
> OK, its not IIS 6. And you cant install it in XP. My mistake.
>
> Please help resolving the issue.
>
>
> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>> Microsoft IIS 6 on Win XP Pro SP2 ?
>> How to install IIS6 on Windows XP?
>>
>>
>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>> Dear Experts,
>>>
>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>> web application and its for development and testing purpose. Normally I
>>> use the machine name instead of localhost. So, I always use something
>>> like, http://mymachine/MYAPP/application.dll.
>>>
>>> But a few weeks ago, I had manually updated the Windows Update, guessing
>>> that it might help me on resolving security vulnerabilities in Windows,
>>> (which I'm not sure what). So after the update, I can no longer use my
>>> machine name and I have to use the localhost instead. Of course this is
>>> OK if I'm working on this machine alone, but I also need to do testing
>>> from other PC directing to this machine as well.
>>>
>>> I tried to telnet to port 80, and it failed to establish connection if
>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>> port 80 if I'm using the machine name. Seems to me that this only
>>> require a little twist somewhere,... but I really have no clue where.
>>>
>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>>>
>>> Can anybody here be kind enough to help me?
>>>
>>> Thank you.
>>>
>>>
>>
>>
>
>
Roger Abell [ Di, 28 November 2006 14:58 ] [ ID #1550277 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

No. SP2 is not part of the update. I already installed SP2 long time ago and
its working well (I can go to port 80 using machine name).

Yes. It's like tcp 80 not being allowed to accept connection if using the
the machine name. I had actually experienced this twice in different
machine. It all happened after I applied Windows Update. I do not sure which
Windows Update package because I normally download and install a whole bunch
of them. After I installed them and reboot, then it happened. I'm sure that
its part of the security feature that was enforced on the system. But I do
not know how to tweak it back to normal again.

I'll gonna do some more testing first and let you know the results.

"Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> How far out of date was this XP on service as obtained from
> Windows Update ? Was SP 2 part of the new service applied?
>
> When you say "all to no avail" what do you mean ? that you
> could not shut off the firewall or that it made no difference?
>
> That you pull up content with localhost shows that IIS is working.
> Use of localhost does not go out the network interface, so either
> tcp 80 is not being allowed in or the website is configured with
> hostheaders to only allow response when hit upon with certain
> host names (like localhost) in use.
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
>> OK, its not IIS 6. And you cant install it in XP. My mistake.
>>
>> Please help resolving the issue.
>>
>>
>> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
>> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>>> Microsoft IIS 6 on Win XP Pro SP2 ?
>>> How to install IIS6 on Windows XP?
>>>
>>>
>>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>>> Dear Experts,
>>>>
>>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>>> web application and its for development and testing purpose. Normally I
>>>> use the machine name instead of localhost. So, I always use something
>>>> like, http://mymachine/MYAPP/application.dll.
>>>>
>>>> But a few weeks ago, I had manually updated the Windows Update,
>>>> guessing that it might help me on resolving security vulnerabilities in
>>>> Windows, (which I'm not sure what). So after the update, I can no
>>>> longer use my machine name and I have to use the localhost instead. Of
>>>> course this is OK if I'm working on this machine alone, but I also need
>>>> to do testing from other PC directing to this machine as well.
>>>>
>>>> I tried to telnet to port 80, and it failed to establish connection if
>>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>>> port 80 if I'm using the machine name. Seems to me that this only
>>>> require a little twist somewhere,... but I really have no clue where.
>>>>
>>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>>> firewall, stopped anti-virus, tweak system setting. But all to no
>>>> avail.
>>>>
>>>> Can anybody here be kind enough to help me?
>>>>
>>>> Thank you.
>>>>
>>>>
>>>
>>>
>>
>>
>
>
ahmad [ Mi, 29 November 2006 02:20 ] [ ID #1551610 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

OK, it is confirmed to be IIS setting. and not TCP/IP network interface or
firewall filter.

The reason: Just now I tried to use Apache Tomcat webserver and point to
port 80, and I use the machinename, ITS WORKING FINE!!
Tried to telnet to port 80 using the machine name, and of course it is
working as well (using Tomcat).

So, the question now is, where is the IIS setting that filter out the
connection if using machinename? It must be somewhere. I'll let you guys
know when I found it. But appreciate if you guys can help me too. :)

Thanks.

"Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> How far out of date was this XP on service as obtained from
> Windows Update ? Was SP 2 part of the new service applied?
>
> When you say "all to no avail" what do you mean ? that you
> could not shut off the firewall or that it made no difference?
>
> That you pull up content with localhost shows that IIS is working.
> Use of localhost does not go out the network interface, so either
> tcp 80 is not being allowed in or the website is configured with
> hostheaders to only allow response when hit upon with certain
> host names (like localhost) in use.
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
>> OK, its not IIS 6. And you cant install it in XP. My mistake.
>>
>> Please help resolving the issue.
>>
>>
>> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
>> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>>> Microsoft IIS 6 on Win XP Pro SP2 ?
>>> How to install IIS6 on Windows XP?
>>>
>>>
>>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>>> Dear Experts,
>>>>
>>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>>> web application and its for development and testing purpose. Normally I
>>>> use the machine name instead of localhost. So, I always use something
>>>> like, http://mymachine/MYAPP/application.dll.
>>>>
>>>> But a few weeks ago, I had manually updated the Windows Update,
>>>> guessing that it might help me on resolving security vulnerabilities in
>>>> Windows, (which I'm not sure what). So after the update, I can no
>>>> longer use my machine name and I have to use the localhost instead. Of
>>>> course this is OK if I'm working on this machine alone, but I also need
>>>> to do testing from other PC directing to this machine as well.
>>>>
>>>> I tried to telnet to port 80, and it failed to establish connection if
>>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>>> port 80 if I'm using the machine name. Seems to me that this only
>>>> require a little twist somewhere,... but I really have no clue where.
>>>>
>>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>>> firewall, stopped anti-virus, tweak system setting. But all to no
>>>> avail.
>>>>
>>>> Can anybody here be kind enough to help me?
>>>>
>>>> Thank you.
>>>>
>>>>
>>>
>>>
>>
>>
>
>
ahmad [ Mi, 29 November 2006 06:42 ] [ ID #1551611 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

The only place I am aware of that might fit the bill is on the
general properties of the website where one defines what
IP the site responds to, as there one can state for what names
(i.e. host headers) the IP will be effective.

"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%23rXDtk3EHHA.996 [at] TK2MSFTNGP02.phx.gbl...
> OK, it is confirmed to be IIS setting. and not TCP/IP network interface or
> firewall filter.
>
> The reason: Just now I tried to use Apache Tomcat webserver and point to
> port 80, and I use the machinename, ITS WORKING FINE!!
> Tried to telnet to port 80 using the machine name, and of course it is
> working as well (using Tomcat).
>
> So, the question now is, where is the IIS setting that filter out the
> connection if using machinename? It must be somewhere. I'll let you guys
> know when I found it. But appreciate if you guys can help me too. :)
>
> Thanks.
>
> "Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
> news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
>> How far out of date was this XP on service as obtained from
>> Windows Update ? Was SP 2 part of the new service applied?
>>
>> When you say "all to no avail" what do you mean ? that you
>> could not shut off the firewall or that it made no difference?
>>
>> That you pull up content with localhost shows that IIS is working.
>> Use of localhost does not go out the network interface, so either
>> tcp 80 is not being allowed in or the website is configured with
>> hostheaders to only allow response when hit upon with certain
>> host names (like localhost) in use.
>>
>> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
>> news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
>>> OK, its not IIS 6. And you cant install it in XP. My mistake.
>>>
>>> Please help resolving the issue.
>>>
>>>
>>> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
>>> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>>>> Microsoft IIS 6 on Win XP Pro SP2 ?
>>>> How to install IIS6 on Windows XP?
>>>>
>>>>
>>>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>>>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>>>> Dear Experts,
>>>>>
>>>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>>>> web application and its for development and testing purpose. Normally
>>>>> I use the machine name instead of localhost. So, I always use
>>>>> something like, http://mymachine/MYAPP/application.dll.
>>>>>
>>>>> But a few weeks ago, I had manually updated the Windows Update,
>>>>> guessing that it might help me on resolving security vulnerabilities
>>>>> in Windows, (which I'm not sure what). So after the update, I can no
>>>>> longer use my machine name and I have to use the localhost instead. Of
>>>>> course this is OK if I'm working on this machine alone, but I also
>>>>> need to do testing from other PC directing to this machine as well.
>>>>>
>>>>> I tried to telnet to port 80, and it failed to establish connection if
>>>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>>>> port 80 if I'm using the machine name. Seems to me that this only
>>>>> require a little twist somewhere,... but I really have no clue where.
>>>>>
>>>>> I tried to uninstall the whole Windows Update. Tried to stopped
>>>>> windows firewall, stopped anti-virus, tweak system setting. But all to
>>>>> no avail.
>>>>>
>>>>> Can anybody here be kind enough to help me?
>>>>>
>>>>> Thank you.
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
Roger Abell [ Mi, 29 November 2006 08:59 ] [ ID #1551612 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

No, you didn't confirm it to be IIS setting because the conclusion does
not make sense. There is no such setting to filter out connections by
machinename.

Why? Because the machinename is not used to make a connection to IIS.
The client does a DNS lookup on the machinename to obtain a IP-address,
and then it makes a TCP/IP connection to port 80 of that IP-address
using the HTTP protocol. IIS never sees the machinename, so how can it
filter out such connections?

Now, there is a documented XPSP2 security patch at the TCP/IP level
which affects local-loopback connectivity via the IP-address associated
with the machinename. It mainly affects NTLM Authentication, which is
enabled on IIS but not Apache. I forget the exact patch# but I know it
exists. And it has a Registry switch to disable that security behavior.

Why it works for Tomcat server, not certain - maybe Java uses its own
networking stack at the native layer.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//


Ahmad A. Rahman wrote:
> OK, it is confirmed to be IIS setting. and not TCP/IP network interface or
> firewall filter.
>
> The reason: Just now I tried to use Apache Tomcat webserver and point to
> port 80, and I use the machinename, ITS WORKING FINE!!
> Tried to telnet to port 80 using the machine name, and of course it is
> working as well (using Tomcat).
>
> So, the question now is, where is the IIS setting that filter out the
> connection if using machinename? It must be somewhere. I'll let you guys
> know when I found it. But appreciate if you guys can help me too. :)
>
> Thanks.
>
> "Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
> news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> > How far out of date was this XP on service as obtained from
> > Windows Update ? Was SP 2 part of the new service applied?
> >
> > When you say "all to no avail" what do you mean ? that you
> > could not shut off the firewall or that it made no difference?
> >
> > That you pull up content with localhost shows that IIS is working.
> > Use of localhost does not go out the network interface, so either
> > tcp 80 is not being allowed in or the website is configured with
> > hostheaders to only allow response when hit upon with certain
> > host names (like localhost) in use.
> >
> > "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> > news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
> >> OK, its not IIS 6. And you cant install it in XP. My mistake.
> >>
> >> Please help resolving the issue.
> >>
> >>
> >> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
> >> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> >>> Microsoft IIS 6 on Win XP Pro SP2 ?
> >>> How to install IIS6 on Windows XP?
> >>>
> >>>
> >>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
> >>> =BC=B6=BCg=A9=F3=B6l=A5=F3=B7s=BBD:%23swJFfqEHHA.4212 [at] TK2MSF TNGP04.ph=
x=2Egbl...
> >>>> Dear Experts,
> >>>>
> >>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host =
my
> >>>> web application and its for development and testing purpose. Normall=
y I
> >>>> use the machine name instead of localhost. So, I always use something
> >>>> like, http://mymachine/MYAPP/application.dll.
> >>>>
> >>>> But a few weeks ago, I had manually updated the Windows Update,
> >>>> guessing that it might help me on resolving security vulnerabilities=
in
> >>>> Windows, (which I'm not sure what). So after the update, I can no
> >>>> longer use my machine name and I have to use the localhost instead. =
Of
> >>>> course this is OK if I'm working on this machine alone, but I also n=
eed
> >>>> to do testing from other PC directing to this machine as well.
> >>>>
> >>>> I tried to telnet to port 80, and it failed to establish connection =
if
> >>>> I'm not using the name 'localhost'. Looks like it block the usage of
> >>>> port 80 if I'm using the machine name. Seems to me that this only
> >>>> require a little twist somewhere,... but I really have no clue where.
> >>>>
> >>>> I tried to uninstall the whole Windows Update. Tried to stopped wind=
ows
> >>>> firewall, stopped anti-virus, tweak system setting. But all to no
> >>>> avail.
> >>>>
> >>>> Can anybody here be kind enough to help me?
> >>>>
> >>>> Thank you.
> >>>>
> >>>>
> >>>
> >>>
> >>
> >>
> >
> >
David Wang [ Mi, 29 November 2006 11:39 ] [ ID #1551614 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01C71400.49B73F10
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

David,

I think you are correct. And your explaination make sense. It must be at =
the NTLM authentication level or somewhere after TCP/IP receive the =
request, but bounced it back off. I know that Apache does not use NTLM =
and that makes the process is much simpler.

I tried to uninstall and re-install IIS just now, and apparently, it is =
still not working.

It must be somewhere in the registry. Somewhere in =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. Not sure which =
key, I'm afraid that I'll blow my whole operating system.

As for the status, I copy this the console message:


------------------------------------------------------------ -------------=
-------

D:\Documents and Settings\Ahmad>telnet rahman 80
Connecting To rahman...Could not open connection to the host, on port =
80: Connec
t failed

D:\Documents and Settings\Ahmad>telnet rahman 25

D:\Documents and Settings\Ahmad>telnet localhost 25

220 rahman Microsoft ESMTP MAIL Service, Version: 6.0.2600.2180 ready at =
Wed, 2
9 Nov 2006 21:45:44 +0800
QUIT
221 Closing connection. Good bye.


Connection to host lost.

D:\Documents and Settings\Ahmad>


------------------------------------------------------------ -------------=
-------



Telnet to port 25 is also not successful if using machinename. The =
journey will continue for me.

But It's weird. Am I alone affected by this weird problem? Anyone out =
there has got this kind of mess?

Thanks.



"David Wang" <w3.4you [at] gmail.com> wrote in message =
news:1164796747.207540.79700 [at] j72g2000cwa.googlegroups.com...
No, you didn't confirm it to be IIS setting because the conclusion does
not make sense. There is no such setting to filter out connections by
machinename.

Why? Because the machinename is not used to make a connection to IIS.
The client does a DNS lookup on the machinename to obtain a IP-address,
and then it makes a TCP/IP connection to port 80 of that IP-address
using the HTTP protocol. IIS never sees the machinename, so how can it
filter out such connections?

Now, there is a documented XPSP2 security patch at the TCP/IP level
which affects local-loopback connectivity via the IP-address associated
with the machinename. It mainly affects NTLM Authentication, which is
enabled on IIS but not Apache. I forget the exact patch# but I know it
exists. And it has a Registry switch to disable that security behavior.

Why it works for Tomcat server, not certain - maybe Java uses its own
networking stack at the native layer.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//


Ahmad A. Rahman wrote:
> OK, it is confirmed to be IIS setting. and not TCP/IP network =
interface or
> firewall filter.
>
> The reason: Just now I tried to use Apache Tomcat webserver and point =
to
> port 80, and I use the machinename, ITS WORKING FINE!!
> Tried to telnet to port 80 using the machine name, and of course it is
> working as well (using Tomcat).
>
> So, the question now is, where is the IIS setting that filter out the
> connection if using machinename? It must be somewhere. I'll let you =
guys
> know when I found it. But appreciate if you guys can help me too. :)
>
> Thanks.
>
> "Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
> news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> > How far out of date was this XP on service as obtained from
> > Windows Update ? Was SP 2 part of the new service applied?
> >
> > When you say "all to no avail" what do you mean ? that you
> > could not shut off the firewall or that it made no difference?
> >
> > That you pull up content with localhost shows that IIS is working.
> > Use of localhost does not go out the network interface, so either
> > tcp 80 is not being allowed in or the website is configured with
> > hostheaders to only allow response when hit upon with certain
> > host names (like localhost) in use.
> >
> > "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> > news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
> >> OK, its not IIS 6. And you cant install it in XP. My mistake.
> >>
> >> Please help resolving the issue.
> >>
> >>
> >> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
> >> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> >>> Microsoft IIS 6 on Win XP Pro SP2 ?
> >>> How to install IIS6 on Windows XP?
> >>>
> >>>
> >>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
> >>> =
=BC=B6=BCg=A9=F3=B6l=A5=F3=B7s=BBD:%23swJFfqEHHA.4212 [at] TK2MSF TNGP04.phx.gb=
l...
> >>>> Dear Experts,
> >>>>
> >>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to =
host my
> >>>> web application and its for development and testing purpose. =
Normally I
> >>>> use the machine name instead of localhost. So, I always use =
something
> >>>> like, http://mymachine/MYAPP/application.dll.
> >>>>
> >>>> But a few weeks ago, I had manually updated the Windows Update,
> >>>> guessing that it might help me on resolving security =
vulnerabilities in
> >>>> Windows, (which I'm not sure what). So after the update, I can no
> >>>> longer use my machine name and I have to use the localhost =
instead. Of
> >>>> course this is OK if I'm working on this machine alone, but I =
also need
> >>>> to do testing from other PC directing to this machine as well.
> >>>>
> >>>> I tried to telnet to port 80, and it failed to establish =
connection if
> >>>> I'm not using the name 'localhost'. Looks like it block the usage =
of
> >>>> port 80 if I'm using the machine name. Seems to me that this only
> >>>> require a little twist somewhere,... but I really have no clue =
where.
> >>>>
> >>>> I tried to uninstall the whole Windows Update. Tried to stopped =
windows
> >>>> firewall, stopped anti-virus, tweak system setting. But all to no
> >>>> avail.
> >>>>
> >>>> Can anybody here be kind enough to help me?
> >>>>
> >>>> Thank you.
> >>>>
> >>>>
> >>>
> >>>
> >>
> >>
> >
> >

------=_NextPart_000_0007_01C71400.49B73F10
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2>David,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I think you are correct. And your =
explaination make
sense. It must be at the NTLM authentication level or somewhere after =
TCP/IP
receive the request, but bounced it back off. I know that Apache does =
not use
NTLM and that makes the process is much simpler.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I tried to uninstall and re-install IIS =
just now,
and apparently, it is still not working.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>It must be somewhere in the registry. =
Somewhere in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. Not sure which =
key, I'm
afraid that I'll blow my whole operating system.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>As for the status, I copy this the =
console
message:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT><FONT face=3DArial =
size=3D2></FONT>
<HR>
<BR><FONT face=3D"Lucida Console" size=3D2>D:\Documents and =
Settings\Ahmad>telnet
rahman 80<BR>Connecting To rahman...Could not open connection to the =
host, on
port 80: Connec<BR>t failed</FONT></DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2>D:\Documents and
Settings\Ahmad>telnet rahman 25</FONT></DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2></FONT> </DIV>
<DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2>D:\Documents and
Settings\Ahmad>telnet localhost 25</FONT></DIV></DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2>220 rahman Microsoft ESMTP =
MAIL Service,
Version: 6.0.2600.2180 ready at  Wed, 2<BR>9 Nov 2006 21:45:44
+0800<BR>QUIT<BR>221 Closing connection. Good bye.</FONT></DIV>
<DIV><FONT face=3D"Lucida Console"></FONT> </DIV><FONT size=3D2>
<DIV><FONT face=3DArial></FONT><FONT face=3DArial></FONT><FONT
face=3DArial></FONT><FONT face=3DArial></FONT><FONT =
face=3DArial></FONT><FONT
face=3DArial></FONT><BR><FONT face=3D"Lucida Console">Connection to host =

lost.</FONT></DIV>
<DIV><FONT face=3D"Lucida Console"></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console">D:\Documents and
Settings\Ahmad></FONT></DIV>
<DIV><FONT face=3D"Lucida Console"></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console">
<HR>
</FONT></DIV>
<DIV><FONT face=3D"Lucida Console"><BR></FONT></DIV></FONT>
<DIV><FONT face=3DArial size=3D2>Telnet to port 25 is also not =
successful if using
machinename. The journey will continue for me.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>But It's weird. Am I alone affected by =
this weird
problem? Anyone out there has got this kind of mess?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>"David Wang" <</FONT><A
href=3D"mailto:w3.4you [at] gmail.com"><FONT face=3DArial
size=3D2>w3.4you [at] gmail.com</FONT></A><FONT face=3DArial size=3D2>> =
wrote in message
</FONT><A =
href=3D"news:1164796747.207540.79700 [at] j72g2000cwa.googlegroup s.com"><FONT =

face=3DArial
size=3D2>news:1164796747.207540.79700 [at] j72g2000cwa.googlegrou ps.com</FONT>=
</A><FONT
face=3DArial size=3D2>...</FONT></DIV><FONT face=3DArial size=3D2>No, =
you didn't confirm
it to be IIS setting because the conclusion does<BR>not make sense. =
There is no
such setting to filter out connections by<BR>machinename.<BR><BR>Why? =
Because
the machinename is not used to make a connection to IIS.<BR>The client =
does a
DNS lookup on the machinename to obtain a IP-address,<BR>and then it =
makes a
TCP/IP connection to port 80 of that IP-address<BR>using the HTTP =
protocol. IIS
never sees the machinename, so how can it<BR>filter out such
connections?<BR><BR>Now, there is a documented XPSP2 security patch at =
the
TCP/IP level<BR>which affects local-loopback connectivity via the =
IP-address
associated<BR>with the machinename. It mainly affects NTLM =
Authentication, which
is<BR>enabled on IIS but not Apache. I forget the exact patch# but I =
know
it<BR>exists. And it has a Registry switch to disable that security
behavior.<BR><BR>Why it works for Tomcat server, not certain - maybe =
Java uses
its own<BR>networking stack at the native =
layer.<BR><BR><BR>//David<BR></FONT><A
href=3D"http://w3-4u.blogspot.com"><FONT face=3DArial
size=3D2>http://w3-4u.blogspot.com</FONT></A><BR><A
href=3D"http://blogs.msdn.com/David.Wang"><FONT face=3DArial
size=3D2>http://blogs.msdn.com/David.Wang</FONT></A><BR><FONT =
face=3DArial
size=3D2>//<BR><BR><BR>Ahmad A. Rahman wrote:<BR>> OK, it is =
confirmed to be
IIS setting. and not TCP/IP network interface or<BR>> firewall
filter.<BR>><BR>> The reason: Just now I tried to use Apache =
Tomcat
webserver and point to<BR>> port 80, and I use the machinename, ITS =
WORKING
FINE!!<BR>> Tried to telnet to port 80 using the machine name, and of =
course
it is<BR>> working as well (using Tomcat).<BR>><BR>> So, the =
question
now is, where is the IIS setting that filter out the<BR>> connection =
if using
machinename? It must be somewhere. I'll let you guys<BR>> know when I =
found
it. But appreciate if you guys can help me too. :)<BR>><BR>>
Thanks.<BR>><BR>> "Roger Abell [MVP]" <</FONT><A
href=3D"mailto:mvpNoSpam [at] asu.edu"><FONT face=3DArial
size=3D2>mvpNoSpam [at] asu.edu</FONT></A><FONT face=3DArial size=3D2>> =
wrote in
message<BR>> </FONT><A
href=3D"news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl"><FONT face=3DArial
size=3D2>news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl</FONT></A><FONT =
face=3DArial
size=3D2>...<BR>> > How far out of date was this XP on service as =
obtained
from<BR>> > Windows Update ?  Was SP 2 part of the new =
service
applied?<BR>> ><BR>> > When you say "all to no avail" what =
do you
mean ?  that you<BR>> > could not shut off the firewall or =
that it
made no difference?<BR>> ><BR>> > That you pull up content =
with
localhost shows that IIS is working.<BR>> > Use of localhost does =
not go
out the network interface, so either<BR>> > tcp 80 is not being =
allowed in
or the website is configured with<BR>> > hostheaders to only allow =

response when hit upon with certain<BR>> > host names (like =
localhost) in
use.<BR>> ><BR>> > "Ahmad A. Rahman" <</FONT><A
href=3D"mailto:ahmad [at] edms.com.my"><FONT face=3DArial
size=3D2>ahmad [at] edms.com.my</FONT></A><FONT face=3DArial size=3D2>> =
wrote in
message<BR>> > </FONT><A
href=3D"news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl"><FONT face=3DArial =

size=3D2>news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl</FONT></A><FONT =
face=3DArial
size=3D2>...<BR>> >> OK, its not IIS 6. And you cant install it =
in XP. My
mistake.<BR>> >><BR>> >> Please help resolving the
issue.<BR>> >><BR>> >><BR>> >> "ad" =
<</FONT><A
href=3D"mailto:flying [at] wfes.tcc.edu.tw"><FONT face=3DArial
size=3D2>flying [at] wfes.tcc.edu.tw</FONT></A><FONT face=3DArial =
size=3D2>> wrote in
message<BR>> >> </FONT><A
href=3D"news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl"><FONT face=3DArial
size=3D2>news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl</FONT></A><FONT =
face=3DArial
size=3D2>...<BR>> >>> Microsoft IIS 6 on Win XP Pro SP2 =
?<BR>>
>>> How to install IIS6 on Windows XP?<BR>> =
>>><BR>>
>>><BR>> >>> "Ahmad A. Rahman" <</FONT><A
href=3D"mailto:ahmad [at] edms.com.my"><FONT face=3DArial
size=3D2>ahmad [at] edms.com.my</FONT></A><FONT face=3DArial =
size=3D2>><BR>>
>>> =
=BC=B6=BCg=A9=F3=B6l=A5=F3=B7s=BBD:%23swJFfqEHHA.4212 [at] TK2MSF TNGP04.phx.gb=
l...<BR>>
>>>> Dear Experts,<BR>> >>>><BR>> =
>>>>
Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host =
my<BR>>
>>>> web application and its for development and testing =
purpose.
Normally I<BR>> >>>> use the machine name instead of =
localhost.
So, I always use something<BR>> >>>> like, </FONT><A
href=3D"http://mymachine/MYAPP/application.dll"><FONT face=3DArial
size=3D2>http://mymachine/MYAPP/application.dll</FONT></A><FONT =
face=3DArial
size=3D2>.<BR>> >>>><BR>> >>>> But a few =
weeks ago,
I had manually updated the Windows Update,<BR>> >>>> =
guessing
that it might help me on resolving security vulnerabilities in<BR>>
>>>> Windows, (which I'm not sure what). So after the =
update, I can
no<BR>> >>>> longer use my machine name and I have to use =
the
localhost instead. Of<BR>> >>>> course this is OK if I'm =
working
on this machine alone, but I also need<BR>> >>>> to do =
testing
from other PC directing to this machine as well.<BR>>
>>>><BR>> >>>> I tried to telnet to port 80, =
and it
failed to establish connection if<BR>> >>>> I'm not using =
the
name 'localhost'. Looks like it block the usage of<BR>> =
>>>> port
80 if I'm using the machine name. Seems to me that this only<BR>>
>>>> require a little twist somewhere,... but I really have =
no clue
where.<BR>> >>>><BR>> >>>> I tried to =
uninstall
the whole Windows Update. Tried to stopped windows<BR>> =
>>>>
firewall, stopped anti-virus, tweak system setting. But all to =
no<BR>>
>>>> avail.<BR>> >>>><BR>> =
>>>> Can
anybody here be kind enough to help me?<BR>> >>>><BR>> =

>>>> Thank you.<BR>> >>>><BR>>
>>>><BR>> >>><BR>> >>><BR>>
>><BR>> >><BR>> ><BR>> =
><BR></FONT></BODY></HTML>

------=_NextPart_000_0007_01C71400.49B73F10--
ahmad [ Mi, 29 November 2006 14:49 ] [ ID #1551615 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

No. SP2 is not part of the update. I already installed SP2 long time ago and
its working well (I can go to port 80 using machine name).

Yes. It's like tcp 80 not being allowed to accept connection if using the
the machine name. I had actually experienced this twice in different
machine. It all happened after I applied Windows Update. I do not sure which
Windows Update package because I normally download and install a whole bunch
of them. After I installed them and reboot, then it happened. I'm sure that
its part of the security feature that was enforced on the system. But I do
not know how to tweak it back to normal again.

I'll gonna do some more testing first and let you know the results.

"Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> How far out of date was this XP on service as obtained from
> Windows Update ? Was SP 2 part of the new service applied?
>
> When you say "all to no avail" what do you mean ? that you
> could not shut off the firewall or that it made no difference?
>
> That you pull up content with localhost shows that IIS is working.
> Use of localhost does not go out the network interface, so either
> tcp 80 is not being allowed in or the website is configured with
> hostheaders to only allow response when hit upon with certain
> host names (like localhost) in use.
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
>> OK, its not IIS 6. And you cant install it in XP. My mistake.
>>
>> Please help resolving the issue.
>>
>>
>> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
>> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>>> Microsoft IIS 6 on Win XP Pro SP2 ?
>>> How to install IIS6 on Windows XP?
>>>
>>>
>>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>>> Dear Experts,
>>>>
>>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>>> web application and its for development and testing purpose. Normally I
>>>> use the machine name instead of localhost. So, I always use something
>>>> like, http://mymachine/MYAPP/application.dll.
>>>>
>>>> But a few weeks ago, I had manually updated the Windows Update,
>>>> guessing that it might help me on resolving security vulnerabilities in
>>>> Windows, (which I'm not sure what). So after the update, I can no
>>>> longer use my machine name and I have to use the localhost instead. Of
>>>> course this is OK if I'm working on this machine alone, but I also need
>>>> to do testing from other PC directing to this machine as well.
>>>>
>>>> I tried to telnet to port 80, and it failed to establish connection if
>>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>>> port 80 if I'm using the machine name. Seems to me that this only
>>>> require a little twist somewhere,... but I really have no clue where.
>>>>
>>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>>> firewall, stopped anti-virus, tweak system setting. But all to no
>>>> avail.
>>>>
>>>> Can anybody here be kind enough to help me?
>>>>
>>>> Thank you.
>>>>
>>>>
>>>
>>>
>>
>>
>
>
ahmad [ Mi, 29 November 2006 02:20 ] [ ID #1551621 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

what do you get in telnet?
can't established connection? or http error ?

is firewall on ? and you have enable http port 80 access?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%23b5P0irEHHA.1748 [at] TK2MSFTNGP02.phx.gbl...
> Hi Bernard,
>
> Yes. Remote machine can ping the servername. I had tried telnet to port 80
> but looks like it refuse to accept the connection. Even if I tried to
> telnet to port 80 on the same machine itself, it still failed, unless I
> use localhost. The only way to go to port 80 is by using the name
> localhost and on the same machine.
>
> Need to inform you again, that this only happened after I installed the
> security update from MS. But I had already uninstalled it, meaning it
> should go to the previous state. But apparently, it is still the same, I
> still cannot connect to port 80 using the machine name.
>
> There must be something that MS had changed in my OS setting after the
> security update installed.
>
> "Bernard Cheah [MVP]" <qbernard [at] hotmail.com.discuss> wrote in message
> news:OiFyOYrEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>> No need to cross post to many groups. just IIS will do.
>> Now - can remote machine ping the servername?
>> telnet the server port 80 remotely?
>>
>> If you able to do so, what do you see when test browse a hello.html
>> remotely?
>>
>> --
>> Regards,
>> Bernard Cheah
>> http://www.iis.net/
>> http://www.iis-resources.com/
>> http://msmvps.com/blogs/bernard/
>>
>>
>> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
>> news:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>> Dear Experts,
>>>
>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>> web application and its for development and testing purpose. Normally I
>>> use the machine name instead of localhost. So, I always use something
>>> like, http://mymachine/MYAPP/application.dll.
>>>
>>> But a few weeks ago, I had manually updated the Windows Update, guessing
>>> that it might help me on resolving security vulnerabilities in Windows,
>>> (which I'm not sure what). So after the update, I can no longer use my
>>> machine name and I have to use the localhost instead. Of course this is
>>> OK if I'm working on this machine alone, but I also need to do testing
>>> from other PC directing to this machine as well.
>>>
>>> I tried to telnet to port 80, and it failed to establish connection if
>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>> port 80 if I'm using the machine name. Seems to me that this only
>>> require a little twist somewhere,... but I really have no clue where.
>>>
>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>> firewall, stopped anti-virus, tweak system setting. But all to no avail.
>>>
>>> Can anybody here be kind enough to help me?
>>>
>>> Thank you.
>>>
>>>
>>
>>
>
>
Bernard [ Mi, 29 November 2006 05:45 ] [ ID #1551631 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

OK, it is confirmed to be IIS setting. and not TCP/IP network interface or
firewall filter.

The reason: Just now I tried to use Apache Tomcat webserver and point to
port 80, and I use the machinename, ITS WORKING FINE!!
Tried to telnet to port 80 using the machine name, and of course it is
working as well (using Tomcat).

So, the question now is, where is the IIS setting that filter out the
connection if using machinename? It must be somewhere. I'll let you guys
know when I found it. But appreciate if you guys can help me too. :)

Thanks.

"Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> How far out of date was this XP on service as obtained from
> Windows Update ? Was SP 2 part of the new service applied?
>
> When you say "all to no avail" what do you mean ? that you
> could not shut off the firewall or that it made no difference?
>
> That you pull up content with localhost shows that IIS is working.
> Use of localhost does not go out the network interface, so either
> tcp 80 is not being allowed in or the website is configured with
> hostheaders to only allow response when hit upon with certain
> host names (like localhost) in use.
>
> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
>> OK, its not IIS 6. And you cant install it in XP. My mistake.
>>
>> Please help resolving the issue.
>>
>>
>> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
>> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>>> Microsoft IIS 6 on Win XP Pro SP2 ?
>>> How to install IIS6 on Windows XP?
>>>
>>>
>>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>>> Dear Experts,
>>>>
>>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>>> web application and its for development and testing purpose. Normally I
>>>> use the machine name instead of localhost. So, I always use something
>>>> like, http://mymachine/MYAPP/application.dll.
>>>>
>>>> But a few weeks ago, I had manually updated the Windows Update,
>>>> guessing that it might help me on resolving security vulnerabilities in
>>>> Windows, (which I'm not sure what). So after the update, I can no
>>>> longer use my machine name and I have to use the localhost instead. Of
>>>> course this is OK if I'm working on this machine alone, but I also need
>>>> to do testing from other PC directing to this machine as well.
>>>>
>>>> I tried to telnet to port 80, and it failed to establish connection if
>>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>>> port 80 if I'm using the machine name. Seems to me that this only
>>>> require a little twist somewhere,... but I really have no clue where.
>>>>
>>>> I tried to uninstall the whole Windows Update. Tried to stopped windows
>>>> firewall, stopped anti-virus, tweak system setting. But all to no
>>>> avail.
>>>>
>>>> Can anybody here be kind enough to help me?
>>>>
>>>> Thank you.
>>>>
>>>>
>>>
>>>
>>
>>
>
>
ahmad [ Mi, 29 November 2006 06:42 ] [ ID #1551634 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

The only place I am aware of that might fit the bill is on the
general properties of the website where one defines what
IP the site responds to, as there one can state for what names
(i.e. host headers) the IP will be effective.

"Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
news:%23rXDtk3EHHA.996 [at] TK2MSFTNGP02.phx.gbl...
> OK, it is confirmed to be IIS setting. and not TCP/IP network interface or
> firewall filter.
>
> The reason: Just now I tried to use Apache Tomcat webserver and point to
> port 80, and I use the machinename, ITS WORKING FINE!!
> Tried to telnet to port 80 using the machine name, and of course it is
> working as well (using Tomcat).
>
> So, the question now is, where is the IIS setting that filter out the
> connection if using machinename? It must be somewhere. I'll let you guys
> know when I found it. But appreciate if you guys can help me too. :)
>
> Thanks.
>
> "Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
> news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
>> How far out of date was this XP on service as obtained from
>> Windows Update ? Was SP 2 part of the new service applied?
>>
>> When you say "all to no avail" what do you mean ? that you
>> could not shut off the firewall or that it made no difference?
>>
>> That you pull up content with localhost shows that IIS is working.
>> Use of localhost does not go out the network interface, so either
>> tcp 80 is not being allowed in or the website is configured with
>> hostheaders to only allow response when hit upon with certain
>> host names (like localhost) in use.
>>
>> "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
>> news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
>>> OK, its not IIS 6. And you cant install it in XP. My mistake.
>>>
>>> Please help resolving the issue.
>>>
>>>
>>> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
>>> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
>>>> Microsoft IIS 6 on Win XP Pro SP2 ?
>>>> How to install IIS6 on Windows XP?
>>>>
>>>>
>>>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
>>>> 级糶秎ン穝籇:%23swJFfqEHHA.4212 [at] TK2MSFTNGP04.phx.gbl...
>>>>> Dear Experts,
>>>>>
>>>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host my
>>>>> web application and its for development and testing purpose. Normally
>>>>> I use the machine name instead of localhost. So, I always use
>>>>> something like, http://mymachine/MYAPP/application.dll.
>>>>>
>>>>> But a few weeks ago, I had manually updated the Windows Update,
>>>>> guessing that it might help me on resolving security vulnerabilities
>>>>> in Windows, (which I'm not sure what). So after the update, I can no
>>>>> longer use my machine name and I have to use the localhost instead. Of
>>>>> course this is OK if I'm working on this machine alone, but I also
>>>>> need to do testing from other PC directing to this machine as well.
>>>>>
>>>>> I tried to telnet to port 80, and it failed to establish connection if
>>>>> I'm not using the name 'localhost'. Looks like it block the usage of
>>>>> port 80 if I'm using the machine name. Seems to me that this only
>>>>> require a little twist somewhere,... but I really have no clue where.
>>>>>
>>>>> I tried to uninstall the whole Windows Update. Tried to stopped
>>>>> windows firewall, stopped anti-virus, tweak system setting. But all to
>>>>> no avail.
>>>>>
>>>>> Can anybody here be kind enough to help me?
>>>>>
>>>>> Thank you.
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
Roger Abell [ Mi, 29 November 2006 08:59 ] [ ID #1551637 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

No, you didn't confirm it to be IIS setting because the conclusion does
not make sense. There is no such setting to filter out connections by
machinename.

Why? Because the machinename is not used to make a connection to IIS.
The client does a DNS lookup on the machinename to obtain a IP-address,
and then it makes a TCP/IP connection to port 80 of that IP-address
using the HTTP protocol. IIS never sees the machinename, so how can it
filter out such connections?

Now, there is a documented XPSP2 security patch at the TCP/IP level
which affects local-loopback connectivity via the IP-address associated
with the machinename. It mainly affects NTLM Authentication, which is
enabled on IIS but not Apache. I forget the exact patch# but I know it
exists. And it has a Registry switch to disable that security behavior.

Why it works for Tomcat server, not certain - maybe Java uses its own
networking stack at the native layer.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//


Ahmad A. Rahman wrote:
> OK, it is confirmed to be IIS setting. and not TCP/IP network interface or
> firewall filter.
>
> The reason: Just now I tried to use Apache Tomcat webserver and point to
> port 80, and I use the machinename, ITS WORKING FINE!!
> Tried to telnet to port 80 using the machine name, and of course it is
> working as well (using Tomcat).
>
> So, the question now is, where is the IIS setting that filter out the
> connection if using machinename? It must be somewhere. I'll let you guys
> know when I found it. But appreciate if you guys can help me too. :)
>
> Thanks.
>
> "Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
> news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> > How far out of date was this XP on service as obtained from
> > Windows Update ? Was SP 2 part of the new service applied?
> >
> > When you say "all to no avail" what do you mean ? that you
> > could not shut off the firewall or that it made no difference?
> >
> > That you pull up content with localhost shows that IIS is working.
> > Use of localhost does not go out the network interface, so either
> > tcp 80 is not being allowed in or the website is configured with
> > hostheaders to only allow response when hit upon with certain
> > host names (like localhost) in use.
> >
> > "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> > news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
> >> OK, its not IIS 6. And you cant install it in XP. My mistake.
> >>
> >> Please help resolving the issue.
> >>
> >>
> >> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
> >> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> >>> Microsoft IIS 6 on Win XP Pro SP2 ?
> >>> How to install IIS6 on Windows XP?
> >>>
> >>>
> >>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
> >>> =BC=B6=BCg=A9=F3=B6l=A5=F3=B7s=BBD:%23swJFfqEHHA.4212 [at] TK2MSF TNGP04.ph=
x=2Egbl...
> >>>> Dear Experts,
> >>>>
> >>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host =
my
> >>>> web application and its for development and testing purpose. Normall=
y I
> >>>> use the machine name instead of localhost. So, I always use something
> >>>> like, http://mymachine/MYAPP/application.dll.
> >>>>
> >>>> But a few weeks ago, I had manually updated the Windows Update,
> >>>> guessing that it might help me on resolving security vulnerabilities=
in
> >>>> Windows, (which I'm not sure what). So after the update, I can no
> >>>> longer use my machine name and I have to use the localhost instead. =
Of
> >>>> course this is OK if I'm working on this machine alone, but I also n=
eed
> >>>> to do testing from other PC directing to this machine as well.
> >>>>
> >>>> I tried to telnet to port 80, and it failed to establish connection =
if
> >>>> I'm not using the name 'localhost'. Looks like it block the usage of
> >>>> port 80 if I'm using the machine name. Seems to me that this only
> >>>> require a little twist somewhere,... but I really have no clue where.
> >>>>
> >>>> I tried to uninstall the whole Windows Update. Tried to stopped wind=
ows
> >>>> firewall, stopped anti-virus, tweak system setting. But all to no
> >>>> avail.
> >>>>
> >>>> Can anybody here be kind enough to help me?
> >>>>
> >>>> Thank you.
> >>>>
> >>>>
> >>>
> >>>
> >>
> >>
> >
> >
David Wang [ Mi, 29 November 2006 11:39 ] [ ID #1551643 ]

Re: MS IIS Setting: HTTP Failed To Connect if Using Machine Name

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01C71400.49B73F10
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

David,

I think you are correct. And your explaination make sense. It must be at =
the NTLM authentication level or somewhere after TCP/IP receive the =
request, but bounced it back off. I know that Apache does not use NTLM =
and that makes the process is much simpler.

I tried to uninstall and re-install IIS just now, and apparently, it is =
still not working.

It must be somewhere in the registry. Somewhere in =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. Not sure which =
key, I'm afraid that I'll blow my whole operating system.

As for the status, I copy this the console message:


------------------------------------------------------------ -------------=
-------

D:\Documents and Settings\Ahmad>telnet rahman 80
Connecting To rahman...Could not open connection to the host, on port =
80: Connec
t failed

D:\Documents and Settings\Ahmad>telnet rahman 25

D:\Documents and Settings\Ahmad>telnet localhost 25

220 rahman Microsoft ESMTP MAIL Service, Version: 6.0.2600.2180 ready at =
Wed, 2
9 Nov 2006 21:45:44 +0800
QUIT
221 Closing connection. Good bye.


Connection to host lost.

D:\Documents and Settings\Ahmad>


------------------------------------------------------------ -------------=
-------



Telnet to port 25 is also not successful if using machinename. The =
journey will continue for me.

But It's weird. Am I alone affected by this weird problem? Anyone out =
there has got this kind of mess?

Thanks.



"David Wang" <w3.4you [at] gmail.com> wrote in message =
news:1164796747.207540.79700 [at] j72g2000cwa.googlegroups.com...
No, you didn't confirm it to be IIS setting because the conclusion does
not make sense. There is no such setting to filter out connections by
machinename.

Why? Because the machinename is not used to make a connection to IIS.
The client does a DNS lookup on the machinename to obtain a IP-address,
and then it makes a TCP/IP connection to port 80 of that IP-address
using the HTTP protocol. IIS never sees the machinename, so how can it
filter out such connections?

Now, there is a documented XPSP2 security patch at the TCP/IP level
which affects local-loopback connectivity via the IP-address associated
with the machinename. It mainly affects NTLM Authentication, which is
enabled on IIS but not Apache. I forget the exact patch# but I know it
exists. And it has a Registry switch to disable that security behavior.

Why it works for Tomcat server, not certain - maybe Java uses its own
networking stack at the native layer.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//


Ahmad A. Rahman wrote:
> OK, it is confirmed to be IIS setting. and not TCP/IP network =
interface or
> firewall filter.
>
> The reason: Just now I tried to use Apache Tomcat webserver and point =
to
> port 80, and I use the machinename, ITS WORKING FINE!!
> Tried to telnet to port 80 using the machine name, and of course it is
> working as well (using Tomcat).
>
> So, the question now is, where is the IIS setting that filter out the
> connection if using machinename? It must be somewhere. I'll let you =
guys
> know when I found it. But appreciate if you guys can help me too. :)
>
> Thanks.
>
> "Roger Abell [MVP]" <mvpNoSpam [at] asu.edu> wrote in message
> news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl...
> > How far out of date was this XP on service as obtained from
> > Windows Update ? Was SP 2 part of the new service applied?
> >
> > When you say "all to no avail" what do you mean ? that you
> > could not shut off the firewall or that it made no difference?
> >
> > That you pull up content with localhost shows that IIS is working.
> > Use of localhost does not go out the network interface, so either
> > tcp 80 is not being allowed in or the website is configured with
> > hostheaders to only allow response when hit upon with certain
> > host names (like localhost) in use.
> >
> > "Ahmad A. Rahman" <ahmad [at] edms.com.my> wrote in message
> > news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl...
> >> OK, its not IIS 6. And you cant install it in XP. My mistake.
> >>
> >> Please help resolving the issue.
> >>
> >>
> >> "ad" <flying [at] wfes.tcc.edu.tw> wrote in message
> >> news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl...
> >>> Microsoft IIS 6 on Win XP Pro SP2 ?
> >>> How to install IIS6 on Windows XP?
> >>>
> >>>
> >>> "Ahmad A. Rahman" <ahmad [at] edms.com.my>
> >>> =
=BC=B6=BCg=A9=F3=B6l=A5=F3=B7s=BBD:%23swJFfqEHHA.4212 [at] TK2MSF TNGP04.phx.gb=
l...
> >>>> Dear Experts,
> >>>>
> >>>> Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to =
host my
> >>>> web application and its for development and testing purpose. =
Normally I
> >>>> use the machine name instead of localhost. So, I always use =
something
> >>>> like, http://mymachine/MYAPP/application.dll.
> >>>>
> >>>> But a few weeks ago, I had manually updated the Windows Update,
> >>>> guessing that it might help me on resolving security =
vulnerabilities in
> >>>> Windows, (which I'm not sure what). So after the update, I can no
> >>>> longer use my machine name and I have to use the localhost =
instead. Of
> >>>> course this is OK if I'm working on this machine alone, but I =
also need
> >>>> to do testing from other PC directing to this machine as well.
> >>>>
> >>>> I tried to telnet to port 80, and it failed to establish =
connection if
> >>>> I'm not using the name 'localhost'. Looks like it block the usage =
of
> >>>> port 80 if I'm using the machine name. Seems to me that this only
> >>>> require a little twist somewhere,... but I really have no clue =
where.
> >>>>
> >>>> I tried to uninstall the whole Windows Update. Tried to stopped =
windows
> >>>> firewall, stopped anti-virus, tweak system setting. But all to no
> >>>> avail.
> >>>>
> >>>> Can anybody here be kind enough to help me?
> >>>>
> >>>> Thank you.
> >>>>
> >>>>
> >>>
> >>>
> >>
> >>
> >
> >

------=_NextPart_000_0007_01C71400.49B73F10
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2>David,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I think you are correct. And your =
explaination make
sense. It must be at the NTLM authentication level or somewhere after =
TCP/IP
receive the request, but bounced it back off. I know that Apache does =
not use
NTLM and that makes the process is much simpler.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I tried to uninstall and re-install IIS =
just now,
and apparently, it is still not working.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>It must be somewhere in the registry. =
Somewhere in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. Not sure which =
key, I'm
afraid that I'll blow my whole operating system.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>As for the status, I copy this the =
console
message:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT><FONT face=3DArial =
size=3D2></FONT>
<HR>
<BR><FONT face=3D"Lucida Console" size=3D2>D:\Documents and =
Settings\Ahmad>telnet
rahman 80<BR>Connecting To rahman...Could not open connection to the =
host, on
port 80: Connec<BR>t failed</FONT></DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2>D:\Documents and
Settings\Ahmad>telnet rahman 25</FONT></DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2></FONT> </DIV>
<DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2>D:\Documents and
Settings\Ahmad>telnet localhost 25</FONT></DIV></DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console" size=3D2>220 rahman Microsoft ESMTP =
MAIL Service,
Version: 6.0.2600.2180 ready at  Wed, 2<BR>9 Nov 2006 21:45:44
+0800<BR>QUIT<BR>221 Closing connection. Good bye.</FONT></DIV>
<DIV><FONT face=3D"Lucida Console"></FONT> </DIV><FONT size=3D2>
<DIV><FONT face=3DArial></FONT><FONT face=3DArial></FONT><FONT
face=3DArial></FONT><FONT face=3DArial></FONT><FONT =
face=3DArial></FONT><FONT
face=3DArial></FONT><BR><FONT face=3D"Lucida Console">Connection to host =

lost.</FONT></DIV>
<DIV><FONT face=3D"Lucida Console"></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console">D:\Documents and
Settings\Ahmad></FONT></DIV>
<DIV><FONT face=3D"Lucida Console"></FONT> </DIV>
<DIV><FONT face=3D"Lucida Console">
<HR>
</FONT></DIV>
<DIV><FONT face=3D"Lucida Console"><BR></FONT></DIV></FONT>
<DIV><FONT face=3DArial size=3D2>Telnet to port 25 is also not =
successful if using
machinename. The journey will continue for me.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>But It's weird. Am I alone affected by =
this weird
problem? Anyone out there has got this kind of mess?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>"David Wang" <</FONT><A
href=3D"mailto:w3.4you [at] gmail.com"><FONT face=3DArial
size=3D2>w3.4you [at] gmail.com</FONT></A><FONT face=3DArial size=3D2>> =
wrote in message
</FONT><A =
href=3D"news:1164796747.207540.79700 [at] j72g2000cwa.googlegroup s.com"><FONT =

face=3DArial
size=3D2>news:1164796747.207540.79700 [at] j72g2000cwa.googlegrou ps.com</FONT>=
</A><FONT
face=3DArial size=3D2>...</FONT></DIV><FONT face=3DArial size=3D2>No, =
you didn't confirm
it to be IIS setting because the conclusion does<BR>not make sense. =
There is no
such setting to filter out connections by<BR>machinename.<BR><BR>Why? =
Because
the machinename is not used to make a connection to IIS.<BR>The client =
does a
DNS lookup on the machinename to obtain a IP-address,<BR>and then it =
makes a
TCP/IP connection to port 80 of that IP-address<BR>using the HTTP =
protocol. IIS
never sees the machinename, so how can it<BR>filter out such
connections?<BR><BR>Now, there is a documented XPSP2 security patch at =
the
TCP/IP level<BR>which affects local-loopback connectivity via the =
IP-address
associated<BR>with the machinename. It mainly affects NTLM =
Authentication, which
is<BR>enabled on IIS but not Apache. I forget the exact patch# but I =
know
it<BR>exists. And it has a Registry switch to disable that security
behavior.<BR><BR>Why it works for Tomcat server, not certain - maybe =
Java uses
its own<BR>networking stack at the native =
layer.<BR><BR><BR>//David<BR></FONT><A
href=3D"http://w3-4u.blogspot.com"><FONT face=3DArial
size=3D2>http://w3-4u.blogspot.com</FONT></A><BR><A
href=3D"http://blogs.msdn.com/David.Wang"><FONT face=3DArial
size=3D2>http://blogs.msdn.com/David.Wang</FONT></A><BR><FONT =
face=3DArial
size=3D2>//<BR><BR><BR>Ahmad A. Rahman wrote:<BR>> OK, it is =
confirmed to be
IIS setting. and not TCP/IP network interface or<BR>> firewall
filter.<BR>><BR>> The reason: Just now I tried to use Apache =
Tomcat
webserver and point to<BR>> port 80, and I use the machinename, ITS =
WORKING
FINE!!<BR>> Tried to telnet to port 80 using the machine name, and of =
course
it is<BR>> working as well (using Tomcat).<BR>><BR>> So, the =
question
now is, where is the IIS setting that filter out the<BR>> connection =
if using
machinename? It must be somewhere. I'll let you guys<BR>> know when I =
found
it. But appreciate if you guys can help me too. :)<BR>><BR>>
Thanks.<BR>><BR>> "Roger Abell [MVP]" <</FONT><A
href=3D"mailto:mvpNoSpam [at] asu.edu"><FONT face=3DArial
size=3D2>mvpNoSpam [at] asu.edu</FONT></A><FONT face=3DArial size=3D2>> =
wrote in
message<BR>> </FONT><A
href=3D"news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl"><FONT face=3DArial
size=3D2>news:eNU5CVvEHHA.4832 [at] TK2MSFTNGP06.phx.gbl</FONT></A><FONT =
face=3DArial
size=3D2>...<BR>> > How far out of date was this XP on service as =
obtained
from<BR>> > Windows Update ?  Was SP 2 part of the new =
service
applied?<BR>> ><BR>> > When you say "all to no avail" what =
do you
mean ?  that you<BR>> > could not shut off the firewall or =
that it
made no difference?<BR>> ><BR>> > That you pull up content =
with
localhost shows that IIS is working.<BR>> > Use of localhost does =
not go
out the network interface, so either<BR>> > tcp 80 is not being =
allowed in
or the website is configured with<BR>> > hostheaders to only allow =

response when hit upon with certain<BR>> > host names (like =
localhost) in
use.<BR>> ><BR>> > "Ahmad A. Rahman" <</FONT><A
href=3D"mailto:ahmad [at] edms.com.my"><FONT face=3DArial
size=3D2>ahmad [at] edms.com.my</FONT></A><FONT face=3DArial size=3D2>> =
wrote in
message<BR>> > </FONT><A
href=3D"news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl"><FONT face=3DArial =

size=3D2>news:%2355BjmtEHHA.1012 [at] TK2MSFTNGP04.phx.gbl</FONT></A><FONT =
face=3DArial
size=3D2>...<BR>> >> OK, its not IIS 6. And you cant install it =
in XP. My
mistake.<BR>> >><BR>> >> Please help resolving the
issue.<BR>> >><BR>> >><BR>> >> "ad" =
<</FONT><A
href=3D"mailto:flying [at] wfes.tcc.edu.tw"><FONT face=3DArial
size=3D2>flying [at] wfes.tcc.edu.tw</FONT></A><FONT face=3DArial =
size=3D2>> wrote in
message<BR>> >> </FONT><A
href=3D"news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl"><FONT face=3DArial
size=3D2>news:uY1aMhtEHHA.4112 [at] TK2MSFTNGP03.phx.gbl</FONT></A><FONT =
face=3DArial
size=3D2>...<BR>> >>> Microsoft IIS 6 on Win XP Pro SP2 =
?<BR>>
>>> How to install IIS6 on Windows XP?<BR>> =
>>><BR>>
>>><BR>> >>> "Ahmad A. Rahman" <</FONT><A
href=3D"mailto:ahmad [at] edms.com.my"><FONT face=3DArial
size=3D2>ahmad [at] edms.com.my</FONT></A><FONT face=3DArial =
size=3D2>><BR>>
>>> =
=BC=B6=BCg=A9=F3=B6l=A5=F3=B7s=BBD:%23swJFfqEHHA.4212 [at] TK2MSF TNGP04.phx.gb=
l...<BR>>
>>>> Dear Experts,<BR>> >>>><BR>> =
>>>>
Previously I'm working on Microsoft IIS 6 on Win XP Pro SP2 to host =
my<BR>>
>>>> web application and its for development and testing =
purpose.
Normally I<BR>> >>>> use the machine name instead of =
localhost.
So, I always use something<BR>> >>>> like, </FONT><A
href=3D"http://mymachine/MYAPP/application.dll"><FONT face=3DArial
size=3D2>http://mymachine/MYAPP/application.dll</FONT></A><FONT =
face=3DArial
size=3D2>.<BR>> >>>><BR>> >>>> But a few =
weeks ago,
I had manually updated the Windows Update,<BR>> >>>> =
guessing
that it might help me on resolving security vulnerabilities in<BR>>
>>>> Windows, (which I'm not sure what). So after the =
update, I can
no<BR>> >>>> longer use my machine name and I have to use =
the
localhost instead. Of<BR>> >>>> course this is OK if I'm =
working
on this machine alone, but I also need<BR>> >>>> to do =
testing
from other PC directing to this machine as well.<BR>>
>>>><BR>> >>>> I tried to telnet to port 80, =
and it
failed to establish connection if<BR>> >>>> I'm not using =
the
name 'localhost'. Looks like it block the usage of<BR>> =
>>>> port
80 if I'm using the machine name. Seems to me that this only<BR>>
>>>> require a little twist somewhere,... but I really have =
no clue
where.<BR>> >>>><BR>> >>>> I tried to =
uninstall
the whole Windows Update. Tried to stopped windows<BR>> =
>>>>
firewall, stopped anti-virus, tweak system setting. But all to =
no<BR>>
>>>> avail.<BR>> >>>><BR>> =
>>>> Can
anybody here be kind enough to help me?<BR>> >>>><BR>> =

>>>> Thank you.<BR>> >>>><BR>>
>>>><BR>> >>><BR>> >>><BR>>
>><BR>> >><BR>> ><BR>> =
><BR></FONT></BODY></HTML>

------=_NextPart_000_0007_01C71400.49B73F10--
ahmad [ Mi, 29 November 2006 14:49 ] [ ID #1551646 ]
Webserver » microsoft.public.inetserver.iis.security » MS IIS Setting: HTTP Failed To Connect if Using Machine Name

Vorheriges Thema: IWA connect to fileserver
Nächstes Thema: Installing Security Certificates Once