Shulou(Shulou.com)06/03 Report--

Production operation environment:

Operating system: Windows Server 2008 R2

Web middleware: IIS 7.0,

Program language running environment: ASP.net

Website function: information intranet

Problem description: when the terminal logs in to the intranet, the automatic jump is shown in the following figure.

The terminal access error is shown in the following figure:

The process of solving the whole problem is very intense because it is in a production environment:

1. It took dozens of minutes to solve the problem

two。 Contact the developer of the program, this kind of problem occurs, is it the problem of the program itself?

3. Contact the network administrator, whether there are restrictions on firewalls, behavior managers, routers and other hardware-related devices, or internal servers or websites are threatened from the outside?

4. Pass the backup program test

5. Turn off the operating system firewall

6. Try to turn off the website security dog and add the IP to the whitelist

7. In the follow-up resolution of the problem, it is found that the local server can be accessed normally, but the terminal cannot access it.

8. Through the intranet test website, or the terminal can not access, basically eliminate network and hardware equipment problems

9. Is it a problem with the program or the original server that you are ready to test the migration of the site to another service?

10. A search for this problem on Baidu found that a large number of posts appeared to be caused by the operation of security dogs.

11. Before the implementation of Article 9, the security dogs on the server are analyzed by protection log, IP blacklist and whitelist, active defense (website vulnerability protection function) and so on.

In the end, it was found that the website security dog on the server blocked the website during operation, and the previous settings allowed access; it is very likely that the website was threatened outside the system during operation, or in the case of relatively large traffic, the security dog automatically intercepted the site because of security concerns. Seeing this error before, the author quickly eliminated the server, database, IIS, program and other related problems. The author thinks that the firewall has intercepted and immediately contacted the network management. Because this server and the security dog also have firewall function, the author maintains it personally and thinks that if it is set up, there will be no problem. However, the author ignores a problem that any problem may occur during the operation of the production environment, which is really a test of the theoretical level and practical experience of an operation and maintenance engineer.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.