Managing Internet Information Servers-setting WEB and FTP properties

web| Server Web Site Properties
Web Site Property Page
The main property page of the diagram in the Web site is used to set the Web site identification parameters, connections, and enable logging.


1. Web site Identification
Click the Advanced button to configure the IP address, TCP port number, and host header name.
IP Address
The address you want to display in this box must already be defined in Control Panel for use on that computer. For more information, see your Windows documentation. If you do not specify a specific IP address, the site responds to all IP addresses that are assigned to the computer and are not assigned to another site, which makes the site the default Web site.
TCP Port
Determine the port on which the service is running. The default is port 80. You can change the port to any unique TCP port number, but the customer must know in advance that the port number is requested, otherwise its request will not be able to connect to the user's server. The port number is required, and the text box cannot be empty, for more information, see Naming a Web site.
SSL Port
To specify the port used for Secure Sockets Layer (SSL) encryption, type the port number in the box. You can change the port number to any unique port number, but the customer must know in advance that the port number is requested, otherwise its request will not be able to connect to the user's server. You must have an SSL port number, the text box cannot be empty, for more information, see encryption.


2. Connection
Infinite
Select this option to allow unlimited number of connections to occur concurrently.
Limit to
Select this option to limit the number of connections that are connected to the site at the same time.
In the dialog box, type the maximum number of connections allowed.
Connection Timeout
Sets the time, in seconds, for the server to disconnect inactive users. This ensures that all connections are closed when the HTTP protocol fails to close the connection.
Enable Keep HTTP Active
Allows the customer to maintain an open connection to the server instead of reopening the client connection one-by-one with the new request. Disabling HTTP activation can degrade server performance. Keep HTTP activation enabled by default. For more information, see Enabling HTTP activation to remain active.


3. Enable Logging
Selecting this option enables logging of the Web site, which records the details of the user's activities and creates a log in the format that the user chooses. When logging is enabled, select a format in the active log format list.
Active log Format:
Microsoft IIS log format fixed ASCII format.
ODBC log (available only in Windows SQL Server)
Records a fixed format to the database.
The expanded log file format can be customized in ASCII format, which is selected by default. You must select this format to use the process account.
To configure log file creation options, such as weekly, or file size, or to configure properties for either the expanded or ODBC log records, click Properties.


Web Site Operators
Use this property sheet to specify the Windows user account that owns the site operator permissions.
Add to
To add a user account to the list of operators, click Add.
Delete
To delete the currently selected user account, click Delete. To select multiple accounts, hold down the CTRL key while selecting a single account, or hold down the SHIFT key when you select a series of accounts.

Performance Property Page
Use this property page to set properties that affect memory and bandwidth use, as shown in the diagram.


Performance tuning
Adjust this setting to the number of daily connections you expect to be on the site. If the number is set slightly below the actual number of connections, the connection speed will be faster and server performance will improve. If the number is set far larger than the actual number of connections, the server memory is wasted and the server's overall performance is reduced.
Enable Bandwidth throttling
Select this option to limit the bandwidth used by your Web site. For this web site only, the bandwidth value you type here overrides the value set at the machine level, even though the value is greater than the computer-level setting.
Enable process Throttling
Select this option to limit the percentage of CPU processing time that the WEB site can be used to process outside the application. If you select this box but do not select mandatory limit, the only consequence will be to write the event to the event record when the specified limit is exceeded.

ISAPI Filter Properties Page
Use this property page to set options for ISAPI filters. ISAPI Filter is a program that responds to events during the processing of HTTP requests.
To add an ISAPI filter, click the Add button.
To remove an ISAPI filter, select it and click the Delete button.
To change the properties of an ISAPI filter, select it and click the Edit button.
To enable the ISAPI filter, select it and click the Enable button.
To disable the ISAPI filter, select it and click the Disable button.
To change the order in which ISAPI filters are executed, select it and click the up or down arrows. Only the load order of filters with the same priority can be changed.

Home Directory Property Page
Use this property page to change the location of the WEB Server home directory (default is/wwwroot), as shown


1. A directory on this computer or a shared location on another computer
Scripting resource access
To allow users to access resource codes that have read or write permissions set, select this option. The resource code includes scripts in the ASP application. For more information, see Setting WEB server Permissions.
Read
To allow users to read or download files (directories) and their associated properties, select this option.
Write
To allow users to upload files and their associated properties to an enabled directory on the server, or to change the contents of a writable file, select this option. The write operation can only be done in a browser that supports the put feature of the HTTP 1.1 protocol standard.

Directory browsing
To allow users to view a hypertext list of files and subdirectories in the virtual directory, select this option. The virtual directory does not appear in the directory list, and the user must know the alias of the virtual directory.
Note: If a user attempts to access a file or directory and the following two conditions are met, the Web server displays a "No access" error message in the user's Web browser.
Disables directory browsing.
The user did not specify a filename, such as filename.htm.
Log access
To record access to the directory in the log file, select this option. Access is logged only if the log is enabled for the Web site. For more information, see Logging Site activity.
Index this resource
If you allow the Microsoft indexing Service to include this directory in the Web
Select this option in the Full-text index of your site.

Application settings
A web-based IIS application is defined by the directory structure in which it resides. For more information, see About applications. To create an application, see Creating an application.
Execute permission
This permission can determine what level of program execution is performed on the site or virtual directory resources. For more information, see Setting Web permissions.
None is allowed to access only static files, such as HTML or image files.
Pure script only allows scripts to be run, such as ASP scripts.
Script and executable programs can access or execute various file types.
Application Protection
Choose how you want to protect your application from running (low) in the same process as the WEB service, running in a separate common process with other applications (medium), or running (high) in separate processes that are different from other processes.

2. Redirect to URL
These properties appear when you select Redirect to URL.
Customers will be sent to
The exact URL entered above
Redirect the virtual directory to the destination URL without adding the original URL
Any other part of it. Use this option to redirect the entire virtual directory to a file. For example, to redirect all requests to the/scripts virtual directory to the file Default.htm in the home directory, type/default.htm in the redirect to text box, and then select this option.
In the directory below
Redirects the parent directory to a subdirectory. For example, to place the home directory (by/
Specify) Redirect to subdirectory "/NewHome", type "/NewHome" in the Redirect to text box, and then select this option. If this option is not selected, the WEB server continues to map the parent directory to itself.
Permanent redirection of this resource
Send the following message to the customer: "301 Permanent redirect". Redirection is considered temporary, and the client browser receives the following message: "302
Temporary redirection ". Some browsers permanently change the URL, such as a bookmark, with a "301 permanent redirect" message as a signal.
REDIRECT Variable
You can use redirect variables to pass portions of the original URL to the destination URL. For more information, see redirecting references.
REDIRECT Wildcard characters
Use the redirect wildcard character to match any number of characters in the original URL.

Document Properties Page
Use this property page to define the default Web page for a site and to attach a footer to a document in your site.
Enable default document
To provide a default document at any time when the browser requests the specified document name, select the check box. The default document can be the home page of a directory or an index page that contains a list of site documents.
To add a new default document, click Add. You can use this attribute to specify multiple default documents. Provide the default document in the order of names that appear in the list. The server will return the first document found.
To change the search order, select a document and click the arrow button.
To remove the default document from the list, click Delete.
Enable document Footer
To automatically attach an HTML-formatted footer to each document sent by the WEB server, select this option.
The footer file should not be a complete HTML document. Instead, you should include only HTML tags that you want to use to format the appearance and functionality of the footer content.
To specify the full path and file name of the footer file, click Browse.

Directory/File Security property sheet
Use this property sheet to set the security features of your WEB server, as shown in the figure.


Anonymous access and authentication control
To configure the authentication and anonymous access features of the WEB server, click Edit. Use this feature to configure the Web server to confirm the identity of the user before granting access to restricted content.
However, you must first create a valid Windows user account and then configure the Windows file System (NTFS) directory and file access permissions for those accounts before the server can authenticate the user. For more information, see About validation.
IP address and Domain name restrictions
(This feature is available only on devices that have Windows SQL Server installed.) ）
To allow or prevent specific users, computers, groups of computers, or domains from accessing the Web site, directory, or file, click Edit. For more information, see About access control.

Secure communications
To create a server certificate request using the New Certificate Wizard, click Server Certificate. After you install a valid server certificate, you can use the secure communication features of the WEB server. For more information, see certificates.
To configure the WEB server's Secure Sockets Layer (SSL) Secure Communication feature, click Edit. You can perform the following actions:
Requires a user to establish a secure (encrypted) link to connect to a user's directory or file.
Configure the client certificate mapping and authentication features for the WEB server.
Create and configure a certificate trust list (CTL).
To enable the Windows directory service matching device
(This option is available only at the primary attribute level and when the server is a member of a Windows 2000 domain.) ）
Select this option if you want to use directory service (DS) client certificate mapping instead of one-to-one or many-to-many mappings. For more information about client certificate mapping, see Mapping a client certificate to a user account.

HTTP Header Property Page
Use the HTTP Header property page as shown to set the value returned to the head of the browser's HTML page.


Boot content Expiration
Select the check box to include the expiration information. Include dates in time-sensitive information, such as special quotes or event announcements. The browser compares the current date with the expiration date to determine whether to display the cached page or request an updated page from the server.

Custom HTTP Headers
Use this property to send a custom HTTP header from the WEB server to the client browser. Custom HTTP headers can be used to send instructions that are not yet supported in the current HTML specification, such as updated HTML tags that IIS does not support when the product is released. For example, you can use a custom HTTP header to allow a client browser to cache a page but prevent the proxy server from caching the page.
To have the WEB server send a custom HTTP header, click Add, and then type the name and value of the header in the Add Custom HTTP Header dialog box.
To edit an existing custom HTTP header, select the custom HTTP header and click Edit.
To terminate the sending of custom HTTP headers, select the custom HTTP header and click Delete.
Content Rating
Use content ratings to embed a descriptive label in the HTTP header of a Web page. Browsers such as Microsoft Internet Explorer version 3.0 or later will detect content ratings to help users identify potentially objectionable Web content.
To set the content rating for your Web site, directory, or file, click Edit Rating.

MIME Mappings
Select the file Type button to configure the Multipurpose Internet Mail Extensions (MIME) mapping.
These mappings set the file types that various WEB services return to the browser. The registry file types that are installed in Windows by default are listed in the File Type dialog box. The file type extension and MIME mappings for the selected file type are listed in the File Type Details box.
To configure additional MIME mappings, click the new Type button in the File Type dialog box.
1. In the File Type dialog box, type the extension associated with the associated extension box.
2. In the content Type (MIME) box, enter the MIME type followed by the filename extension in the form of MIME type/file name extension.

To remove a MIME map, select the file type in the Registered File type box and click Delete.

To edit an existing MIME map, select the file type in the Registered file type box, and then click the Edit button and modify the contents of the associated extension and content type (MIME) boxes as required.

If you set a MIME mapping for your computer in the main property page, the Web sites and directories in your computer will use the same mappings. You can modify MIME mappings for Web sites or directories, however, if you reapply the primary property, the primary property completely replaces the modified properties of the Web site or directory. In other words, the properties are not merged.

Custom Error Message Property page
When an error occurs on the WEB server, use the custom Error message property page to customize the HTTP error that is sent to the customer. Administrators can use the general HTTP 1.1 error or detailed custom error files that IIS provides, or create their own custom error files.
To change the properties of your custom error message, click the Edit Properties button. If the output type is a URL, the URL must exist on the local server.
To configure a custom error to return using the default HTTP 1.1 error, click the Set as Default button. To select multiple custom errors, hold down the CTRL key while you select.


FrontPage Server Extensions
It is composed of three programs, which are fixed to perform management, creation and view.

Site Properties
FTP Site Properties Page
Use this property page to set the server's identity parameters, as shown in the figure. The server name, domain name, and IP address are optional.


Identification description
You can optionally select the name of the server. This name is used primarily to identify individuals and organizational identities.
IP Address
For the address displayed in this box, you must first define it as available in Control Panel. For more information, see your Windows documentation.
TCP Port
Determine the port where the service is running.
The default value is Port 21. You can change this port to any unique TCP port number. However, the customer must know the port number before requesting the port number, otherwise the request will not be able to connect to the server.

Connection Unlimited
The number of connections to the server at the same time is unrestricted.
Limit to
Sets the maximum number of connections that are allowed to connect to the server at the same time.
Connection Timeout
Sets the time before the server disconnects inactive users. This option ensures that all connections are turned off if the HTTP protocol closes the connection.
Enable logging
Select this check box to enable FTP site logging, which can record detailed information about user activity and create log files in multiple formats. After you enable logging, select a format in the active log format list. The format looks like this:
Microsoft IIS Log format: fixed ASCII format.
The Consortium expansion log file format: A custom ASCII format, which is selected by default.
ODBC Records: (for Windows Server only) records the fixed format of the database.
To configure the options for creating log files (for example, weekly or per file size), or to configure the properties of the expansion or ODBC log for the consortium, click Properties.
Current session
Click the button to view the list of users who are currently connected to the site. This feature is not available in Internet Services Manager (HTML).

Security Account Properties Page
Use this property page to control who can use the server, and to specify the account number that is used to log on to the computer for anonymous client requests.
Allow Anonymous connections
Select this option to allow users who use the "anonymous" username to log on to the FTP server. For more information, see About validation.
User name
Type the user name to use when you connect anonymously.
To find a specific Windows user account, click Browse.
Password
Type the password used by the anonymous connection account. If the Allow IIS control password option is selected, the password cannot be changed.
Allow only anonymous connections
Only anonymous connections are allowed. When this check box is selected, users cannot log on with their user name and password. This option avoids account access with administrative privileges and allows only account access that is specified as anonymous.
Allow IIS to control passwords
Select this option to enable the FPT site to automatically set the same anonymous password settings as in Windows.

FTP Site Operators
The FTP site operator is a special set of users who have limited access to their FTP sites. Operators can manage properties that affect only their site. The operator cannot access properties that involve IIS, the Windows server computer hosting IIS, or the network. For more information, see About Web and FTP sites.
Add to
To add a user account to the list of operators, click Add.
Delete
To delete the currently selected user account, click Delete. If you want to select more than one account at a time, you can hold down the CTRL key while you select each account, or hold down the SHIFT key and select a range of accounts.

Message Properties Page
Use this property page to create your own messages that will be displayed to users when they visit a user's site.
Welcome
This text is displayed the first time you connect to an FTP server. This message is empty by default.
Exit
This text is displayed when the customer logs off from the FTP server. This message is empty by default.
Maximum number of connections
This text is displayed if the client is still trying to connect when the number of connections to the FTP service has reached the maximum allowable value. This message is empty by default.

FTP Home Directory Property page
Use this property page to change the home directory of an FTP site or modify its properties. The home directory is the central location for the published files in the FTP site. When you install the FTP service, a default home directory named \ftproot is created. You can change the location of the home directory to one of the following locations:
The directory on this computer.
A shared location on another computer. When prompted, type the user name and password required to access that computer. If you want to change your user name and password, click Connect As.
FTP Site Directory
Type the directory path or destination URL in this text box. The syntax must match the selected path type:
For local directories, use the full path, such as C:\Catalog\Shoes. You can also click the Browse button to select a local path without typing the path.
For network shared directories, use universal Naming Convention (UNC) servers and share names, such as \\Webserver\Htmlfiles.
Browse
Select the local directory by clicking Browse instead of typing the path in the Path text box.

Read
Select this option to allow users to read or download files stored in the home directory or virtual directory.
Write
Allows users to upload files to a directory that is enabled in the server. Select this option only for directories that may receive user files.
Log access
Select this check box if you want to record access activities to the directory in the log file. The access activity can be logged only if logging is enabled for this FTP site. By default, the log is enabled. To turn off the log, select the FTP site, open its Properties page, click the FTP Site tab, and then clear the Enable Log check box.
Catalog List Style
MS-DOS: By default, the MS-DOS catalog list style displays the year in 2-digit format. You can also change the setting for this display year by enabling FtpDirBrowseShowLongDate.
Unix:unix directory list style displays the year in 4-digit format when the file date differs from the FTP server's year. If the file date is the same as the FTP server, the year is not returned.

Directory Security Property Page
Use this property page to set access rights for specific IP addresses to prevent certain individuals or groups from accessing the server.
TCP/IP Access restrictions
You can control access to FTP resources such as sites, virtual directories, or files by specifying the IP address, subnet mask, or domain name of one or more computers that you allow or disallow access to.
Authorized access
To list the computers that are denied access, select this option.
Access Denied
To list the computers that are allowed to access, select this option.
Add to
To add a computer that is denied access, select the grant Access button, and then click Add. Instead, to add a computer that is allowed to access, select the Deny Access button, and then click Add.
Note: The computer that accesses the user server through a proxy server displays the IP address of the proxy server.