During day of world intellectual property comes, beijing High Court lawsuit of the domain name since amount to delimits went up full stop. Network industry ever exploded 2000 give an astonishing inside story: Top class domain name has Chinese Internet actually in the hand that 10 % grasp in a company, finite liability company has passed information of Beijing nation network CNNIC registered thousands of domain name, include brand of as well-known as hundreds international such as home of Du Bang, Bao Jie, appropriate company among them identical abecedarian domain name, what become the domain name on CNNIC to register thereby is the biggest door. The domain name is equivalent to doorplate or address in the action in Internet. All over the world, without reduplicative domain name, no matter be international domain name or domestic domain name, the user that the whole world receives Internet can accurate arrive without by accident visit. The domain name is self-evident to the importance of the enterprise. Country network company this action makes a lot of companies were immersed in passivity undoubtedly, also make oneself were on dock, much home crossed national big company to offer suit to its. Country network company also loses a lawsuit again and again because of tort.
The lawsuit of a few domain names of final judgment of this Beijing tall courtyard, country the adversary of the net still is (the United States) wrap up of combination of Bao Jie company, United States serves a company to wait for such crossing national big company. In the country among the dispute case of network company and treasure clean company, although country the net states he registers a domain name again and again nonexistent subjective ill will, did not make unfair competition, but the testimony that cannot take be convinced of person of sell one's own things however comes. Treasure clean company registered international domain name in August 1995 " Olay.com " etc registered trade mark is using power. Network company was the same as the country in May 1999 center of Chinese Internet information (CNNIC) the 3 grade domain name that identifies a gender is had in registering this domain name " OLAY " the registered trade mark with Bao Jie company " O-LAY " identical, as prevenient as treasure clean company registered domain name " O-lay.com " in have the 2 grade domain name that identifies a gender " OLAY " identical. The court thinks enough causes the mistake of relevant public, and country network company registers his the domain name, did not debut up to now use, go up objectively hampered treasure clean company is registered in China " O-lay.com.cn " the right of the domain name, the subjective ill will of behavior is clearly, already made unfair competition, company of adjudicative nation network is cancelled " Olay.com.cn " domain name, recoup loss of treasure clean company 900 yuan.

The United States combines wrap up to serve a company is the biggest package on the world fast give a company, held water 1907. The English name of this company is UnitedParcelServiceofAmer-ica, inc, abbreviate is " Ups " . This company was registered in 160 many countries and area " Ups " brand. This company registered international domain name on computer network in April 1992 " Ups.com " undertake use. 1993, the United States laps the company enters China to enter go by battalion and advertisement propaganda jointly. Came 1997 1998, the United States combines approve of bureau of brand of China of package company classics, register on multinomial commodity and service " Ups " reach graphical trade mark.

On May 25, 1999, country network company registered a domain name in center of information of Chinese internet network " Ups.com.cn " , did not use actually up to now. Arrive in the accused after the court, country network company does not think however him tort, because " Ups " not be famous label, they register a domain name medium " Ups " be " UPS " abbreviate. Face this kind to explain. The court thinks: "The UPS is supplied implement " the English abbreviate that is English Uninterruptible Power Supply, it is the name that computer industry uses a kind of power source, this name is begin to use after the computer appears, the English abbreviate that is later than the United States to lap the company uses this company name jointly " Ups " time,

Combine the evidence that package company submits according to the United States, can maintain this company to go up through the advertisement of media and outdoors advertisement waiting in the press, magazine use " Ups " registered trade mark, use on computer network " Ups " registered trade mark undertakes management an activity, make " Ups " registered trade mark is relevant public know, it is certain to have famous degree, can maintain in relevant public, contain " Ups " registered trade mark and company of American combination package are to be equal connect.

Network company also admits the country in register " Ups.com.cn " before the domain name, not to it relevant prevenient right, also did not register the logical explanation of this domain name. After registering this domain name, disloyal all the time border is used, can maintain a country network company is to prevent combination to lap the company registers this domain name of purpose, have clear commercial purpose, the net registers the country the behavior of this domain name has ill will, company of adjudicative nation network is cancelled " Ups.com.cn " domain name.

The other that adjudicates in the corresponding period in lawsuit of a few domain names, country network company loses a lawsuit likewise. Have in China certain and famous spend " SUBWAY " , " EILE " , " NINEWEST " the person of trade mark right of brand: Limited company of American doctor combination, Holand surpasses 100 flavour international finite liability company, (France) press of Li Baiqi of humble of birch a pavilion or house on a terrace, (the United States) be able to bear or endure round company also recaptured Enxibuji respectively oneself Chinese domain name.

·On April 1:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 2:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 3:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 4:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 5:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 6:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 7:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 8:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 9:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 10:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 11:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 12:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 13:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 14:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 15:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)






·On April 16:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 17:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 18:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 19:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 20:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 21:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 22:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 23:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 24:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)



·On April 25:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 26:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 27:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 28:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

·On April 29:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)






·On April 30:  inspects inclined? of  of Li  condition to be arranged by domain name accident) ; list (arrange by initial)

When you open a certain website, you may not know, this visit is possible already by far the place of a company that is in the United States is recorded -- , as a result of the root domain name that runs his the server was in China to establish a mirror, american power luck believes a company (Verisign) the record that can obtain Chinese user domain name to visit easily.



Recently, chinese net connects power luck of group and United States to believe (VeriSign) company opens server of mirror of China of Internet root domain name jointly, think in the masses this act will carry user of fast our country to visit the backside of the domain name outside the condition such as COM, the visit data that is Internet of China of American company monitoring however offerred advantage.



The reporter understands, internet shares server of 13 roots domain name, come from A M number, respectively deploy is in the United States, England, Sweden and Japan. In fact, be in early 2003, blame profitability is organized -- , internet association (ISC) its the F root server of place administer built a mirror in China, become the server of mirror of the first root that China has. In September 2005, the blame profitability orgnaization that manages I root " Swedish country Internet exchanges a center " in center of information of Chinese internet network (CNNIC) established mirror of the 2nd root of Chinese -- , I root mirror. And what what established recently is the J root that manages by place of Verisign of American business company the mirror of the server. "No matter introduce server of how many mirror, still cannot solve the problem that bypass of the domain name outside the condition such as COM visits thoroughly. " internet name is organized with address allocation (ICANN) Qianhualin's researcher says chief scientist of center of network of director, Chinese Academy of Sciences.



Introduce according to him, through root mirror server is being established in home, it is the first pace that the domain name visits only, raised the rate with analytic root namely. But, for domain name of the COM that is set in the United States to a large number of analytic servers, NET, its greater part decomposes analyse to still need ability of bypass United States to finish, the promotion of speed is almost negligible not plan.



As we have learned, servers of some two roots mirror are embraced before China, it is by indifferent blame profitability international organization is built in China, security is higher, and the visit of Chinese Internet log submissively gives foreign business company, safe hidden trouble abruptly protruding shows. Expert introduction, verisign can carry the visit daily record of root server mirror completely, the analysis reachs the visit information of Chinese netizen even each websites, especially the visit feature of website of important orgnaization, government. Thereby, the visit habit of Chinese netizen and the analytic information that visit information and website expose the surveillance at American company completely under.



Internet safety expert points out, "Because China did not have the administrative power of root of the any in 13 roots server, in root domain name analytic next devoid dominant counterpoise, if domestic website counts the COM domain name that runs by the company outside the condition in great quantities, once produce international conflict, the root server mirror of China of nip off of the orgnaization outside the condition and mirror of COM domain name, the website of domain name of all use COM will not be visited, chinese Internet will is immersed in break down, consequence is unimaginable. " this expert makes clear a proposal, while China is striving for administrative power of pair of server of root domain name, must reduce what wait for the domain name outside the condition to COM to depend on degree, ability enhances the integral security of Chinese Internet.

The domain name registers Com 60 yuan / year Chinese channel New network Cn 50 yuan / year Chinese channel New network
Contact 13013980666 0516 of telephone call of king of QQ 470666 graph- - 83821968











Eee100.cnRomen.cnOnesun.cnTwyp.cnHnhct.cnJsyp.cnCdyp.cnAhyp.cnSxyp.cnZzyp.cnXgyp.cnAmyp.cnNjyp.cnNbyp.cnDlyp.cnYcyp.cnJnyp.cnHkyp.cnCzyp.cnCsyp.cn 2b4b.com
2dbj.com
2ehr.com
3bvo.com
3doe.com
5icn.com
5t88.com
5ygw.com
5yir.com
61mm.com
62cq.com
63yz.com
678o.com
6nic.com
71gm.com
72cd.com
72kk.com
77zz.com
8fwl.com
97ad.com more deletes list of Cn country domain name now... more deletes list of international domain name now...

The domain name trades forum

IIS (Internet Information Server) one of Web servers that serve as current popularity, provided powerful Internet and Intranet service function, how to strengthen the safe mechanism of IIS, build the Web server of a high safety performance, already made the main component that cannot ignore in IIS setting.



The article will be passed the following two respects will elaborate the method that strengthens IIS safe mechanism.



One, it is a foundation with the safe mechanism of Windows NT



As the IIS that moves below environment of Windows NT operating system, its security also should build the base in Windows NT security over.



1. Use NTFS file system



NTFS can undertake administrative to file and catalog, and FAT (file allocation is expressed) file system can provide the security that shares stage only, the proposal uses NTFS system when installing Windows NT.



2. Share the modification of attributive



Below default circumstance, every build to be shared newly, its Everyone user can be enjoyed " complete control " share jurisdiction, accordingly, building after sharing, want newly to revise Everyone default attributive instantly.



3. For systematic manager Zhang date more renown



Region user manages implement although can limit the number that guesses countersign, but to systematic manager Zhang date is not used however, this may bring the opportunity that atttacks countersign of administrator Zhang date to illegal user, manage through region user implement to administrator Zhang date more renown can yet be regarded as a kind of tweak. Specific setting is as follows:



(1) start " region user manages implement " ;



(2) pitch on administrator Zhang date;



(3) start " user " those who choose sheet to fall " name again " undertake modification to its.



4. The NetBIOS on revocatory TCP/IP



The administrator can carry the image between name of NetBIOS of tectonic target station and its IP address, the other server that goes up to Internet undertakes administrative, illegal user also can find an opportunity that can be exploited to sbs advantage from which. If this is planted,long-range management is not must, should abolish instantly (pass network property tie calm option, between revocatory NetBIOS and TCP/IP bind calm) .



2, the safe mechanism that sets IIS



1. Safe problem of the attention answers when installation



(1) avoid installation to be in advocate on region controller



After installing IIS, IUSR_Computername anonymous account will be made on the computer of installation, this account is added in region user group, provide the visit limits of authority that uses at region user group to every faceless user that visits Web server thereby, this brings huge potential risk to IIS not only, and likely still embroil is whole the safety of region resource, want to avoid to install IIS on region controller as far as possible, especially advocate region controller.



(2) avoid installation to be on systematic partition



Put IIS on systematic partition, can make systematic file and IIS face illegal visit likewise, make illegal user invades systematic partition easily.



2. User pilot security



(1) faceless user



The faceless user IUSR_Computername of the generation after installing IIS (the password arises randomly) , its are faceless the visit brings potential security problem to Web server, answer its attributive to try to control. If do not have faceless visit need, can cancel the faceless service of Web. Specific means:



① starts ISM (Internet Server Manager) ;



② starts WWW to serve attribute page;



③ cancels his faceless visit serves.



(2) average user



Through using number and letter (include big small letter) combinative countersign, increase the frequency of modification password, of the entry attempt that block fails and account live period wait to undertake administrative to average user account.



3. The security of entry attestation



IIS server provides pair of users the identity attestation of 3 kinds of forms.



Faceless visit: Do not undertake between need and user alternant, allow anyone faceless visit site, the security in attestation of these 3 kinds of identities is lowest.



Basic (Basic) test and verify: The user name that below this means the user inputs and countersign upload in the network with means of proclaimed in writing be defeated, do not have any adding close, illegal user can come through be being monitored on the net intercept data bag, get user name and password from which, safety performance is average.



Windows NT requests / answer way: The browser undertakes communicating through adding close means and IIS server, prevented listener-in effectively, it is the attestation form with higher security. The defect of this kind of means is only IE3.0 and above version just support.



4. Visit attributive control



(1) the visit attributive of folder and file: Place the folder on NTFS file system and document, want to try to control to its attributive on one hand, undertake to different user group and user different limits of authority is installed; Additional, the respect such as the purpose that still can use the member that the function of examine and verify of NTFS is comprised to certain and specific user to read a document undertakes examine and verify, the discovery such as the use that is like object of file visit, user effectively through surveillance is illegal what the user has illegal activity is augural, try in time to prevent check. Specific means:



① is started " region user manages implement " ;



② is started " regular " choose sheet to fall " examine and verify " option;



③ is installed " examine and verify is regular " .



(2) the visit attributive of WWW catalog: Had installed the folder of Web catalog, can come true to visit the control of attributive to WWW catalog through operating page of Web site attribute, and all files below this catalog and child folder will accede these security. WWW serves besides providing the limits of authority that NTFS file system provides, early childhood to take limits of authority for reading, allow an user to read the document in take or downloading WWW catalog; Executive attributive, allow an user to run the program below WWW catalog and scenario. Specific setting method:




  IIS of fictitious lead plane is on guard inbreak 10 common problems are solved



1. How to let ASP script move with System attributive?



Revise the fictitious catalog of correspondence of place of your Asp script, repair " of " application program protection instead " low " .



2. How to prevent Asp trojan?



Be based on the Asp trojan of FileSystemObject component



Cacls %systemroot%\system32\scrrun.dll /e /d Guests // prohibits Guests is used



Regsvr32 Scrrun.dll /u /s // is deleted



Be based on the Asp trojan of Shell.application component



Cacls %systemroot%\system32\shell32.dll /e /d Guests // prohibits Guests is used



Regsvr32 Shell32.dll /u /s // is deleted



3. How to add close Asp file?



From Microsoft free download moves directly to Sce10chs.exe can complete installation process. After installation ends, will make Screnc.exe file, this is a command tool that moves in DOS PROMAPT. Moving Screnc - L Vbscript Source.asp Destination.asp generates the new document Destination.asp that includes script of close article ASP. Open with notebook look always in "" , without giving thought to whether annotate, become cannot reading close article, but cannot add close Chinese.



4. How to extract Urlscan from inside IISLockdown?



Iislockd.exe /q /c /t:c: \Urlscan



5. How to prevent Content-Location heading the in-house IP address that exposed Web server?



Carry out



Cscript C:\Inetpub\adminscripts\adsutil.vbs Set W3svc/UseHostName True



Final need starts Iis afresh.



6. How to solve HTTP500 in-house mistake?



Iis Http500 interior is wrong major reason, basically the pace is caused. We want date of synchronous Iwam_myserver Zhang to apply the password in the program to be able to solve a problem in Com only.



Carry out



Cscript C:\Inetpub\adminscripts\synciwam.vbs -v



7. How to enhance the ability of Iis defence SYN Flood?



Windows Registry Editor Version 5.00



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]



The Syn that start atttacks protection. Default the value is 0, express not open atttacks protection, the value is 1 and 2 state the Syn that start atttacks protection, set into 2 later, safe level is higher, to why be being planted the state falls consider as attack, need the TcpMaxHalfOpen below the basis and TcpMaxHalfOpenRetried value, the condition of set will spark started. What the attention needs here is, NT4.0 must be set for 1, set for 2 hind in some kind special data wraps next meetings to bring about a system to restart.



"SynAttackProtect"=dWord:00000002



Allow the half join amount that open at the same time. Alleged half join, state unfinished makes built TCP conversation, using Netstat command to be able to see those who assume SYN_RCVD position is. Here uses Microsoft to suggest to be worth, the server is set for 100, advanced server is set for 500. The proposal can be set a bit a bit tinier.



"TcpMaxHalfOpen"=dword:00000064



Whether does judgement put what atttacking to spark dot. Here uses Microsoft to suggest to be worth, the server is 80, advanced server is 400.



"TcpMaxHalfOpenRetried"=dword:00000050



The setting awaits SYN-ACK time. Default the value is 3, disappear of this one process costs default a 45 seconds. The value is 2, use up time to be 21 seconds.



The value is 1, use up time to be 9 seconds. Lowest can be set for 0, express not to await, use up time to be 3 seconds. This value can be revised according to sustaining attack scale. Microsoft site safety is recommended for 2.



"TcpMaxConnectResponseRetransmissions"=dword:00000001



Setting TCP transmits individual data again paragraph frequency. Default the value is 5, disappear of this one process costs default a 240 seconds. Microsoft site safety is recommended for 3.



"TcpMaxDataRetransmissions"=dword:00000003




Yesterday reporter from China of domain name agent company of 10 thousand networks learns, this company had adjusted the acting price of CN domain name, the surpasses low case to achieve industry of representative of domestic CN domain name lowest record with 17 yuan.

Before this, the price of representative of CN domain name of agent of domestic mainstream domain name all fluctuates in 339 yuan, this action will cause 10 thousand networks possibly new round price war. 10 thousand nets of Chinese are in charge of a personage expressing, of price of representative of CN domain name reduce greatly, have the plan that hopes the help makes 10 thousand representatives join in now actually not only, the goal that surmounts domestic COM domain name to register a quantity also achieves inside the time that hopeful makes CN domain name is in one year, at present the enrollment of domestic CN domain name and COM domain name is measured differ nearly 910 thousand.

← Previous Page Next Page →