Hello,

We have many web applications on our web server (Windows 2003 IIS 6.0).



We would like to have one solution to handle all web application errors:

- Redirect to general error website
- Send e-mail alert to server admin


We do not have access to source code of all our web applications (ASP.NET), so we cannot always handle errors in source code.



Do you know any good solution for this scenario?



One of our ideas was to set custom error section in web.config files, and redirect users to ASP.NET web application.

This application has to display user-friendly message and send email.


The problem is that such web page is potentially security hole!
Anyone can access such page and generate hundreds of email messages.



Maybe is it workaround for this?



Thanks!

Wojtek

I'd go the custom 500/404 routes. The user-frienliness outweighs the security risk, and if something does come along and generates hundreds of mail messages in a short time period (in 7 years of using custom 500/404s, I've never seen that happen), you can always blacklist the rogue.

Do you have access to web.config file?