|
Home > Archive > IIS Server > June 2005 > EXE report "page cannot be displayed"
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
EXE report "page cannot be displayed"
|
|
|
| I have an IIS server running and to my knowledge, has worked fine without
problems. I used the IID lockdown tool and since, everything seems fine.
Recently it has bee brought to my attention that the .EXE will report a 404
Page Cannont be Diplayed.
Things I have tried.
Permissions Wizard
Adding .exe to the MIME file types with the application/octet-stream
Added a .txt file to the same directory which displayed correctly
Tried accessing and .msi file which was successful
It appears that the problem exists with the .exe file
I am stumped at this point.
Any help would be appreciated...
Thanks,
ryan
| |
| Ken Schaefer 2005-05-09, 2:56 am |
| What version of IIS are you running? Presumably IIS5? If so, did you put
..exe into the allowed extensions list in urlscan.ini?
Cheers
Ken
--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Ryan" <ryanzome@none.giv> wrote in message
news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
:I have an IIS server running and to my knowledge, has worked fine without
: problems. I used the IID lockdown tool and since, everything seems fine.
:
: Recently it has bee brought to my attention that the .EXE will report a
404
: Page Cannont be Diplayed.
:
: Things I have tried.
:
: Permissions Wizard
: Adding .exe to the MIME file types with the application/octet-stream
: Added a .txt file to the same directory which displayed correctly
: Tried accessing and .msi file which was successful
:
: It appears that the problem exists with the .exe file
:
: I am stumped at this point.
:
: Any help would be appreciated...
:
: Thanks,
:
: ryan
:
:
| |
|
| Yes, correct IIS 5 with Citrix XP Presentation Server running. I tried
making every variance of change to the urlscan.ini
is it possible that I did this incorrectly? If I set the AllowFileExtensions
value to 1 then only the few extensions listed there are displayed (in some
instances, i get a blank page)
I am using Windows 2000 with all the latest updates and service packs and
Citrix XP Metaframe FR3 with SP3.
anything else? thanks for the response and it still may be correct if i did
something incorrectly.
Regards,
ryan
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
> What version of IIS are you running? Presumably IIS5? If so, did you put
> .exe into the allowed extensions list in urlscan.ini?
>
>
> "Ryan" <ryanzome@none.giv> wrote in message
> news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
> :I have an IIS server running and to my knowledge, has worked fine without
> : problems. I used the IID lockdown tool and since, everything seems fine.
> :
> : Recently it has bee brought to my attention that the .EXE will report a
> 404
> : Page Cannont be Diplayed.
> :
> : Things I have tried.
> :
> : Permissions Wizard
> : Adding .exe to the MIME file types with the application/octet-stream
> : Added a .txt file to the same directory which displayed correctly
> : Tried accessing and .msi file which was successful
> :
> : It appears that the problem exists with the .exe file
> :
> : I am stumped at this point.
> :
> : Any help would be appreciated...
> :
> : Thanks,
> :
> : ryan
> :
> :
>
>
| |
| Ken Schaefer 2005-05-09, 2:56 am |
| OK, two things:
a) can you post the relevant request entries from the IIS log file.
Generally, if URLScan is rejecting the request, you will see a <rejected by
URLScan> entry in the log
b) can you post the relevant sections from the URLScan.ini file
Cheers
Ken
--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Ryan" <ryanzome@none.giv> wrote in message
news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
: Yes, correct IIS 5 with Citrix XP Presentation Server running. I tried
: making every variance of change to the urlscan.ini
:
: is it possible that I did this incorrectly? If I set the
AllowFileExtensions
: value to 1 then only the few extensions listed there are displayed (in
some
: instances, i get a blank page)
:
: I am using Windows 2000 with all the latest updates and service packs and
: Citrix XP Metaframe FR3 with SP3.
:
: anything else? thanks for the response and it still may be correct if i
did
: something incorrectly.
:
: Regards,
:
: ryan
:
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
: > What version of IIS are you running? Presumably IIS5? If so, did you put
: > .exe into the allowed extensions list in urlscan.ini?
: >
:
: >
: > "Ryan" <ryanzome@none.giv> wrote in message
: > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
: > :I have an IIS server running and to my knowledge, has worked fine
without
: > : problems. I used the IID lockdown tool and since, everything seems
fine.
: > :
: > : Recently it has bee brought to my attention that the .EXE will report
a
: > 404
: > : Page Cannont be Diplayed.
: > :
: > : Things I have tried.
: > :
: > : Permissions Wizard
: > : Adding .exe to the MIME file types with the application/octet-stream
: > : Added a .txt file to the same directory which displayed correctly
: > : Tried accessing and .msi file which was successful
: > :
: > : It appears that the problem exists with the .exe file
: > :
: > : I am stumped at this point.
: > :
: > : Any help would be appreciated...
: > :
: > : Thanks,
: > :
: > : ryan
: > :
: > :
: >
: >
:
:
| |
|
| IIS reports rejected by URLScan three times... I snapped the link three
times in succession and the three GET ***.exe files were rejected by URLscan
i changed portions of the urlscan.ini to AllowExtensions=1
and i added .exe to the list below in the allowed extensions
this brings down the site entirely. when i turn off the Allow extensions
(AllowExtensions=0)
everything works fine again
I'm stumped... It is clear that URLscan is stopping the exe downloads but i
can't seem to enable them... can you post and relevant entries that i may be
missing???
thanks
sam
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
> OK, two things:
>
> a) can you post the relevant request entries from the IIS log file.
> Generally, if URLScan is rejecting the request, you will see a <rejected
> by
> URLScan> entry in the log
>
> b) can you post the relevant sections from the URLScan.ini file
>
> Cheers
> Ken
>
> --
> Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Ryan" <ryanzome@none.giv> wrote in message
> news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
> : Yes, correct IIS 5 with Citrix XP Presentation Server running. I tried
> : making every variance of change to the urlscan.ini
> :
> : is it possible that I did this incorrectly? If I set the
> AllowFileExtensions
> : value to 1 then only the few extensions listed there are displayed (in
> some
> : instances, i get a blank page)
> :
> : I am using Windows 2000 with all the latest updates and service packs
> and
> : Citrix XP Metaframe FR3 with SP3.
> :
> : anything else? thanks for the response and it still may be correct if i
> did
> : something incorrectly.
> :
> : Regards,
> :
> : ryan
> :
> : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
> : > What version of IIS are you running? Presumably IIS5? If so, did you
> put
> : > .exe into the allowed extensions list in urlscan.ini?
> : >
> :
> : >
> : > "Ryan" <ryanzome@none.giv> wrote in message
> : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
> : > :I have an IIS server running and to my knowledge, has worked fine
> without
> : > : problems. I used the IID lockdown tool and since, everything seems
> fine.
> : > :
> : > : Recently it has bee brought to my attention that the .EXE will
> report
> a
> : > 404
> : > : Page Cannont be Diplayed.
> : > :
> : > : Things I have tried.
> : > :
> : > : Permissions Wizard
> : > : Adding .exe to the MIME file types with the application/octet-stream
> : > : Added a .txt file to the same directory which displayed correctly
> : > : Tried accessing and .msi file which was successful
> : > :
> : > : It appears that the problem exists with the .exe file
> : > :
> : > : I am stumped at this point.
> : > :
> : > : Any help would be appreciated...
> : > :
> : > : Thanks,
> : > :
> : > : ryan
> : > :
> : > :
> : >
> : >
> :
> :
>
>
| |
| Ken Schaefer 2005-05-10, 2:48 am |
| Hi,
It appears that when you have AllowExtensions = 0 URLScan is blocking the
requests
When you change AllowExtensions = 1, and add .exe, the request is going
through to IIS. If the site is then "hanging" you are encountering a
different issue. I would check to ensure that you do not have "Scripts and
Executables" set as the Execute permission for the website/folder in
question. If you do, then IIS will attempt to run the exe on the server,
rather than allowing the user to download it. Permission should be set to
"scripts only" or "none".
Cheers
Ken
--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Ryan" <ryanzome@none.giv> wrote in message
news:e9O6bMRVFHA.3212@TK2MSFTNGP10.phx.gbl...
: IIS reports rejected by URLScan three times... I snapped the link three
: times in succession and the three GET ***.exe files were rejected by
URLscan
:
: i changed portions of the urlscan.ini to AllowExtensions=1
: and i added .exe to the list below in the allowed extensions
:
: this brings down the site entirely. when i turn off the Allow extensions
: (AllowExtensions=0)
: everything works fine again
:
: I'm stumped... It is clear that URLscan is stopping the exe downloads but
i
: can't seem to enable them... can you post and relevant entries that i may
be
: missing???
:
: thanks
:
: sam
:
:
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
: > OK, two things:
: >
: > a) can you post the relevant request entries from the IIS log file.
: > Generally, if URLScan is rejecting the request, you will see a <rejected
: > by
: > URLScan> entry in the log
: >
: > b) can you post the relevant sections from the URLScan.ini file
: >
: > Cheers
: > Ken
: >
: > --
: > Blog: www.adopenstatic.com/cs/blogs/ken/
: > Web: www.adopenstatic.com
: >
: >
: > "Ryan" <ryanzome@none.giv> wrote in message
: > news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
: > : Yes, correct IIS 5 with Citrix XP Presentation Server running. I tried
: > : making every variance of change to the urlscan.ini
: > :
: > : is it possible that I did this incorrectly? If I set the
: > AllowFileExtensions
: > : value to 1 then only the few extensions listed there are displayed (in
: > some
: > : instances, i get a blank page)
: > :
: > : I am using Windows 2000 with all the latest updates and service packs
: > and
: > : Citrix XP Metaframe FR3 with SP3.
: > :
: > : anything else? thanks for the response and it still may be correct if
i
: > did
: > : something incorrectly.
: > :
: > : Regards,
: > :
: > : ryan
: > :
: > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
: > : > What version of IIS are you running? Presumably IIS5? If so, did you
: > put
: > : > .exe into the allowed extensions list in urlscan.ini?
: > : >
: > :
: > : >
: > : > "Ryan" <ryanzome@none.giv> wrote in message
: > : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
: > : > :I have an IIS server running and to my knowledge, has worked fine
: > without
: > : > : problems. I used the IID lockdown tool and since, everything seems
: > fine.
: > : > :
: > : > : Recently it has bee brought to my attention that the .EXE will
: > report
: > a
: > : > 404
: > : > : Page Cannont be Diplayed.
: > : > :
: > : > : Things I have tried.
: > : > :
: > : > : Permissions Wizard
: > : > : Adding .exe to the MIME file types with the
application/octet-stream
: > : > : Added a .txt file to the same directory which displayed correctly
: > : > : Tried accessing and .msi file which was successful
: > : > :
: > : > : It appears that the problem exists with the .exe file
: > : > :
: > : > : I am stumped at this point.
: > : > :
: > : > : Any help would be appreciated...
: > : > :
: > : > : Thanks,
: > : > :
: > : > : ryan
: > : > :
: > : > :
: > : >
: > : >
: > :
: > :
: >
: >
:
:
| |
|
| I have to allow scripts but the website and the default website (from which
all permissions are inherited in this case) are set to allow scripts only
and NOT the "Scripts and Executables" option
still is not allowing the downloading of executables.... even with Allow
Extensions= 1 and .exe in the allowed list in urlscan (which according to
the log is most certainly denying the attempt) and with scripts only set in
IIS MMC
help!
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:OJj9A7RVFHA.2664@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> It appears that when you have AllowExtensions = 0 URLScan is blocking the
> requests
>
> When you change AllowExtensions = 1, and add .exe, the request is going
> through to IIS. If the site is then "hanging" you are encountering a
> different issue. I would check to ensure that you do not have "Scripts and
> Executables" set as the Execute permission for the website/folder in
> question. If you do, then IIS will attempt to run the exe on the server,
> rather than allowing the user to download it. Permission should be set to
> "scripts only" or "none".
>
> Cheers
> Ken
>
> --
> Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Ryan" <ryanzome@none.giv> wrote in message
> news:e9O6bMRVFHA.3212@TK2MSFTNGP10.phx.gbl...
> : IIS reports rejected by URLScan three times... I snapped the link three
> : times in succession and the three GET ***.exe files were rejected by
> URLscan
> :
> : i changed portions of the urlscan.ini to AllowExtensions=1
> : and i added .exe to the list below in the allowed extensions
> :
> : this brings down the site entirely. when i turn off the Allow extensions
> : (AllowExtensions=0)
> : everything works fine again
> :
> : I'm stumped... It is clear that URLscan is stopping the exe downloads
> but
> i
> : can't seem to enable them... can you post and relevant entries that i
> may
> be
> : missing???
> :
> : thanks
> :
> : sam
> :
> :
> : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
> : > OK, two things:
> : >
> : > a) can you post the relevant request entries from the IIS log file.
> : > Generally, if URLScan is rejecting the request, you will see a
> <rejected
> : > by
> : > URLScan> entry in the log
> : >
> : > b) can you post the relevant sections from the URLScan.ini file
> : >
> : > Cheers
> : > Ken
> : >
> : > --
> : > Blog: www.adopenstatic.com/cs/blogs/ken/
> : > Web: www.adopenstatic.com
> : >
> : >
> : > "Ryan" <ryanzome@none.giv> wrote in message
> : > news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
> : > : Yes, correct IIS 5 with Citrix XP Presentation Server running. I
> tried
> : > : making every variance of change to the urlscan.ini
> : > :
> : > : is it possible that I did this incorrectly? If I set the
> : > AllowFileExtensions
> : > : value to 1 then only the few extensions listed there are displayed
> (in
> : > some
> : > : instances, i get a blank page)
> : > :
> : > : I am using Windows 2000 with all the latest updates and service
> packs
> : > and
> : > : Citrix XP Metaframe FR3 with SP3.
> : > :
> : > : anything else? thanks for the response and it still may be correct
> if
> i
> : > did
> : > : something incorrectly.
> : > :
> : > : Regards,
> : > :
> : > : ryan
> : > :
> : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : > : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
> : > : > What version of IIS are you running? Presumably IIS5? If so, did
> you
> : > put
> : > : > .exe into the allowed extensions list in urlscan.ini?
> : > : >
> : > :
> : > : >
> : > : > "Ryan" <ryanzome@none.giv> wrote in message
> : > : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
> : > : > :I have an IIS server running and to my knowledge, has worked fine
> : > without
> : > : > : problems. I used the IID lockdown tool and since, everything
> seems
> : > fine.
> : > : > :
> : > : > : Recently it has bee brought to my attention that the .EXE will
> : > report
> : > a
> : > : > 404
> : > : > : Page Cannont be Diplayed.
> : > : > :
> : > : > : Things I have tried.
> : > : > :
> : > : > : Permissions Wizard
> : > : > : Adding .exe to the MIME file types with the
> application/octet-stream
> : > : > : Added a .txt file to the same directory which displayed
> correctly
> : > : > : Tried accessing and .msi file which was successful
> : > : > :
> : > : > : It appears that the problem exists with the .exe file
> : > : > :
> : > : > : I am stumped at this point.
> : > : > :
> : > : > : Any help would be appreciated...
> : > : > :
> : > : > : Thanks,
> : > : > :
> : > : > : ryan
> : > : > :
> : > : > :
> : > : >
> : > : >
> : > :
> : > :
> : >
> : >
> :
> :
>
>
| |
| Ken Schaefer 2005-05-10, 8:47 pm |
| OK, first we need to ensure that URLScan is *not* rejecting the requests. So
you need to determine a URLScan configuration that will allow this.
Then we need to ensure that IIS is permitting the download. So, if you are
having trouble configuring URLScan.ini then please cut-n-paste the relevant
sections of your .ini file.
If you have a problem elsewhere, then please clarify that. As you can see,
IIS has a long request processing pipeline, and we need to work out at which
point the request is being rejected:
http://www.adopenstatic.com/FAQ/IIS...Processing.aspx
Cheers
Ken
--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Ryan" <ryanzome@none.giv> wrote in message
news:OBr9rTXVFHA.580@TK2MSFTNGP15.phx.gbl...
:I have to allow scripts but the website and the default website (from which
: all permissions are inherited in this case) are set to allow scripts only
: and NOT the "Scripts and Executables" option
:
: still is not allowing the downloading of executables.... even with Allow
: Extensions= 1 and .exe in the allowed list in urlscan (which according to
: the log is most certainly denying the attempt) and with scripts only set
in
: IIS MMC
:
: help!
:
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: news:OJj9A7RVFHA.2664@TK2MSFTNGP15.phx.gbl...
: > Hi,
: >
: > It appears that when you have AllowExtensions = 0 URLScan is blocking
the
: > requests
: >
: > When you change AllowExtensions = 1, and add .exe, the request is going
: > through to IIS. If the site is then "hanging" you are encountering a
: > different issue. I would check to ensure that you do not have "Scripts
and
: > Executables" set as the Execute permission for the website/folder in
: > question. If you do, then IIS will attempt to run the exe on the server,
: > rather than allowing the user to download it. Permission should be set
to
: > "scripts only" or "none".
: >
: > Cheers
: > Ken
: >
: > --
: > Blog: www.adopenstatic.com/cs/blogs/ken/
: > Web: www.adopenstatic.com
: >
: >
: > "Ryan" <ryanzome@none.giv> wrote in message
: > news:e9O6bMRVFHA.3212@TK2MSFTNGP10.phx.gbl...
: > : IIS reports rejected by URLScan three times... I snapped the link
three
: > : times in succession and the three GET ***.exe files were rejected by
: > URLscan
: > :
: > : i changed portions of the urlscan.ini to AllowExtensions=1
: > : and i added .exe to the list below in the allowed extensions
: > :
: > : this brings down the site entirely. when i turn off the Allow
extensions
: > : (AllowExtensions=0)
: > : everything works fine again
: > :
: > : I'm stumped... It is clear that URLscan is stopping the exe downloads
: > but
: > i
: > : can't seem to enable them... can you post and relevant entries that i
: > may
: > be
: > : missing???
: > :
: > : thanks
: > :
: > : sam
: > :
: > :
: > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > : news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
: > : > OK, two things:
: > : >
: > : > a) can you post the relevant request entries from the IIS log file.
: > : > Generally, if URLScan is rejecting the request, you will see a
: > <rejected
: > : > by
: > : > URLScan> entry in the log
: > : >
: > : > b) can you post the relevant sections from the URLScan.ini file
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : > --
: > : > Blog: www.adopenstatic.com/cs/blogs/ken/
: > : > Web: www.adopenstatic.com
: > : >
: > : >
: > : > "Ryan" <ryanzome@none.giv> wrote in message
: > : > news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
: > : > : Yes, correct IIS 5 with Citrix XP Presentation Server running. I
: > tried
: > : > : making every variance of change to the urlscan.ini
: > : > :
: > : > : is it possible that I did this incorrectly? If I set the
: > : > AllowFileExtensions
: > : > : value to 1 then only the few extensions listed there are displayed
: > (in
: > : > some
: > : > : instances, i get a blank page)
: > : > :
: > : > : I am using Windows 2000 with all the latest updates and service
: > packs
: > : > and
: > : > : Citrix XP Metaframe FR3 with SP3.
: > : > :
: > : > : anything else? thanks for the response and it still may be correct
: > if
: > i
: > : > did
: > : > : something incorrectly.
: > : > :
: > : > : Regards,
: > : > :
: > : > : ryan
: > : > :
: > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > : > : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
: > : > : > What version of IIS are you running? Presumably IIS5? If so, did
: > you
: > : > put
: > : > : > .exe into the allowed extensions list in urlscan.ini?
: > : > : >
: > : > :
: > : > : >
: > : > : > "Ryan" <ryanzome@none.giv> wrote in message
: > : > : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
: > : > : > :I have an IIS server running and to my knowledge, has worked
fine
: > : > without
: > : > : > : problems. I used the IID lockdown tool and since, everything
: > seems
: > : > fine.
: > : > : > :
: > : > : > : Recently it has bee brought to my attention that the .EXE will
: > : > report
: > : > a
: > : > : > 404
: > : > : > : Page Cannont be Diplayed.
: > : > : > :
: > : > : > : Things I have tried.
: > : > : > :
: > : > : > : Permissions Wizard
: > : > : > : Adding .exe to the MIME file types with the
: > application/octet-stream
: > : > : > : Added a .txt file to the same directory which displayed
: > correctly
: > : > : > : Tried accessing and .msi file which was successful
: > : > : > :
: > : > : > : It appears that the problem exists with the .exe file
: > : > : > :
: > : > : > : I am stumped at this point.
: > : > : > :
: > : > : > : Any help would be appreciated...
: > : > : > :
: > : > : > : Thanks,
: > : > : > :
: > : > : > : ryan
: > : > : > :
: > : > : > :
: > : > : >
: > : > : >
: > : > :
: > : > :
: > : >
: > : >
: > :
: > :
: >
: >
:
:
| |
|
| it is of course, URLScan that is denying the attempt.... I know how to read
the IIS logs.
i am not having trouble configuring the INI file. The file's default values
from the IIS lockdown tool are there now and the site is working except for
the .exe files
as i said the log file shows "rejected by URLScan" when i try to download
the executables
what is that you want? i'm not sure
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:ezEis$bVFHA.1508@tk2msftngp13.phx.gbl...
> OK, first we need to ensure that URLScan is *not* rejecting the requests.
> So
> you need to determine a URLScan configuration that will allow this.
>
> Then we need to ensure that IIS is permitting the download. So, if you are
> having trouble configuring URLScan.ini then please cut-n-paste the
> relevant
> sections of your .ini file.
>
> If you have a problem elsewhere, then please clarify that. As you can see,
> IIS has a long request processing pipeline, and we need to work out at
> which
> point the request is being rejected:
> http://www.adopenstatic.com/FAQ/IIS...Processing.aspx
>
> Cheers
> Ken
>
> --
> Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Ryan" <ryanzome@none.giv> wrote in message
> news:OBr9rTXVFHA.580@TK2MSFTNGP15.phx.gbl...
> :I have to allow scripts but the website and the default website (from
> which
> : all permissions are inherited in this case) are set to allow scripts
> only
> : and NOT the "Scripts and Executables" option
> :
> : still is not allowing the downloading of executables.... even with Allow
> : Extensions= 1 and .exe in the allowed list in urlscan (which according
> to
> : the log is most certainly denying the attempt) and with scripts only set
> in
> : IIS MMC
> :
> : help!
> :
> : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : news:OJj9A7RVFHA.2664@TK2MSFTNGP15.phx.gbl...
> : > Hi,
> : >
> : > It appears that when you have AllowExtensions = 0 URLScan is blocking
> the
> : > requests
> : >
> : > When you change AllowExtensions = 1, and add .exe, the request is
> going
> : > through to IIS. If the site is then "hanging" you are encountering a
> : > different issue. I would check to ensure that you do not have "Scripts
> and
> : > Executables" set as the Execute permission for the website/folder in
> : > question. If you do, then IIS will attempt to run the exe on the
> server,
> : > rather than allowing the user to download it. Permission should be set
> to
> : > "scripts only" or "none".
> : >
> : > Cheers
> : > Ken
> : >
> : > --
> : > Blog: www.adopenstatic.com/cs/blogs/ken/
> : > Web: www.adopenstatic.com
> : >
> : >
> : > "Ryan" <ryanzome@none.giv> wrote in message
> : > news:e9O6bMRVFHA.3212@TK2MSFTNGP10.phx.gbl...
> : > : IIS reports rejected by URLScan three times... I snapped the link
> three
> : > : times in succession and the three GET ***.exe files were rejected by
> : > URLscan
> : > :
> : > : i changed portions of the urlscan.ini to AllowExtensions=1
> : > : and i added .exe to the list below in the allowed extensions
> : > :
> : > : this brings down the site entirely. when i turn off the Allow
> extensions
> : > : (AllowExtensions=0)
> : > : everything works fine again
> : > :
> : > : I'm stumped... It is clear that URLscan is stopping the exe
> downloads
> : > but
> : > i
> : > : can't seem to enable them... can you post and relevant entries that
> i
> : > may
> : > be
> : > : missing???
> : > :
> : > : thanks
> : > :
> : > : sam
> : > :
> : > :
> : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : > : news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
> : > : > OK, two things:
> : > : >
> : > : > a) can you post the relevant request entries from the IIS log
> file.
> : > : > Generally, if URLScan is rejecting the request, you will see a
> : > <rejected
> : > : > by
> : > : > URLScan> entry in the log
> : > : >
> : > : > b) can you post the relevant sections from the URLScan.ini file
> : > : >
> : > : > Cheers
> : > : > Ken
> : > : >
> : > : > --
> : > : > Blog: www.adopenstatic.com/cs/blogs/ken/
> : > : > Web: www.adopenstatic.com
> : > : >
> : > : >
> : > : > "Ryan" <ryanzome@none.giv> wrote in message
> : > : > news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
> : > : > : Yes, correct IIS 5 with Citrix XP Presentation Server running. I
> : > tried
> : > : > : making every variance of change to the urlscan.ini
> : > : > :
> : > : > : is it possible that I did this incorrectly? If I set the
> : > : > AllowFileExtensions
> : > : > : value to 1 then only the few extensions listed there are
> displayed
> : > (in
> : > : > some
> : > : > : instances, i get a blank page)
> : > : > :
> : > : > : I am using Windows 2000 with all the latest updates and service
> : > packs
> : > : > and
> : > : > : Citrix XP Metaframe FR3 with SP3.
> : > : > :
> : > : > : anything else? thanks for the response and it still may be
> correct
> : > if
> : > i
> : > : > did
> : > : > : something incorrectly.
> : > : > :
> : > : > : Regards,
> : > : > :
> : > : > : ryan
> : > : > :
> : > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : > : > : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
> : > : > : > What version of IIS are you running? Presumably IIS5? If so,
> did
> : > you
> : > : > put
> : > : > : > .exe into the allowed extensions list in urlscan.ini?
> : > : > : >
> : > : > :
> : > : > : >
> : > : > : > "Ryan" <ryanzome@none.giv> wrote in message
> : > : > : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
> : > : > : > :I have an IIS server running and to my knowledge, has worked
> fine
> : > : > without
> : > : > : > : problems. I used the IID lockdown tool and since, everything
> : > seems
> : > : > fine.
> : > : > : > :
> : > : > : > : Recently it has bee brought to my attention that the .EXE
> will
> : > : > report
> : > : > a
> : > : > : > 404
> : > : > : > : Page Cannont be Diplayed.
> : > : > : > :
> : > : > : > : Things I have tried.
> : > : > : > :
> : > : > : > : Permissions Wizard
> : > : > : > : Adding .exe to the MIME file types with the
> : > application/octet-stream
> : > : > : > : Added a .txt file to the same directory which displayed
> : > correctly
> : > : > : > : Tried accessing and .msi file which was successful
> : > : > : > :
> : > : > : > : It appears that the problem exists with the .exe file
> : > : > : > :
> : > : > : > : I am stumped at this point.
> : > : > : > :
> : > : > : > : Any help would be appreciated...
> : > : > : > :
> : > : > : > : Thanks,
> : > : > : > :
> : > : > : > : ryan
> : > : > : > :
> : > : > : > :
> : > : > : >
> : > : > : >
> : > : > :
> : > : > :
> : > : >
> : > : >
> : > :
> : > :
> : >
> : >
> :
> :
>
>
| |
|
|
|
| oh BTW... thanks Ken for all the help
I owe you one.
Kudos brutha
later
ryan
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:ezEis$bVFHA.1508@tk2msftngp13.phx.gbl...
> OK, first we need to ensure that URLScan is *not* rejecting the requests.
> So
> you need to determine a URLScan configuration that will allow this.
>
> Then we need to ensure that IIS is permitting the download. So, if you are
> having trouble configuring URLScan.ini then please cut-n-paste the
> relevant
> sections of your .ini file.
>
> If you have a problem elsewhere, then please clarify that. As you can see,
> IIS has a long request processing pipeline, and we need to work out at
> which
> point the request is being rejected:
> http://www.adopenstatic.com/FAQ/IIS...Processing.aspx
>
> Cheers
> Ken
>
> --
> Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Ryan" <ryanzome@none.giv> wrote in message
> news:OBr9rTXVFHA.580@TK2MSFTNGP15.phx.gbl...
> :I have to allow scripts but the website and the default website (from
> which
> : all permissions are inherited in this case) are set to allow scripts
> only
> : and NOT the "Scripts and Executables" option
> :
> : still is not allowing the downloading of executables.... even with Allow
> : Extensions= 1 and .exe in the allowed list in urlscan (which according
> to
> : the log is most certainly denying the attempt) and with scripts only set
> in
> : IIS MMC
> :
> : help!
> :
> : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : news:OJj9A7RVFHA.2664@TK2MSFTNGP15.phx.gbl...
> : > Hi,
> : >
> : > It appears that when you have AllowExtensions = 0 URLScan is blocking
> the
> : > requests
> : >
> : > When you change AllowExtensions = 1, and add .exe, the request is
> going
> : > through to IIS. If the site is then "hanging" you are encountering a
> : > different issue. I would check to ensure that you do not have "Scripts
> and
> : > Executables" set as the Execute permission for the website/folder in
> : > question. If you do, then IIS will attempt to run the exe on the
> server,
> : > rather than allowing the user to download it. Permission should be set
> to
> : > "scripts only" or "none".
> : >
> : > Cheers
> : > Ken
> : >
> : > --
> : > Blog: www.adopenstatic.com/cs/blogs/ken/
> : > Web: www.adopenstatic.com
> : >
> : >
> : > "Ryan" <ryanzome@none.giv> wrote in message
> : > news:e9O6bMRVFHA.3212@TK2MSFTNGP10.phx.gbl...
> : > : IIS reports rejected by URLScan three times... I snapped the link
> three
> : > : times in succession and the three GET ***.exe files were rejected by
> : > URLscan
> : > :
> : > : i changed portions of the urlscan.ini to AllowExtensions=1
> : > : and i added .exe to the list below in the allowed extensions
> : > :
> : > : this brings down the site entirely. when i turn off the Allow
> extensions
> : > : (AllowExtensions=0)
> : > : everything works fine again
> : > :
> : > : I'm stumped... It is clear that URLscan is stopping the exe
> downloads
> : > but
> : > i
> : > : can't seem to enable them... can you post and relevant entries that
> i
> : > may
> : > be
> : > : missing???
> : > :
> : > : thanks
> : > :
> : > : sam
> : > :
> : > :
> : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : > : news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
> : > : > OK, two things:
> : > : >
> : > : > a) can you post the relevant request entries from the IIS log
> file.
> : > : > Generally, if URLScan is rejecting the request, you will see a
> : > <rejected
> : > : > by
> : > : > URLScan> entry in the log
> : > : >
> : > : > b) can you post the relevant sections from the URLScan.ini file
> : > : >
> : > : > Cheers
> : > : > Ken
> : > : >
> : > : > --
> : > : > Blog: www.adopenstatic.com/cs/blogs/ken/
> : > : > Web: www.adopenstatic.com
> : > : >
> : > : >
> : > : > "Ryan" <ryanzome@none.giv> wrote in message
> : > : > news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
> : > : > : Yes, correct IIS 5 with Citrix XP Presentation Server running. I
> : > tried
> : > : > : making every variance of change to the urlscan.ini
> : > : > :
> : > : > : is it possible that I did this incorrectly? If I set the
> : > : > AllowFileExtensions
> : > : > : value to 1 then only the few extensions listed there are
> displayed
> : > (in
> : > : > some
> : > : > : instances, i get a blank page)
> : > : > :
> : > : > : I am using Windows 2000 with all the latest updates and service
> : > packs
> : > : > and
> : > : > : Citrix XP Metaframe FR3 with SP3.
> : > : > :
> : > : > : anything else? thanks for the response and it still may be
> correct
> : > if
> : > i
> : > : > did
> : > : > : something incorrectly.
> : > : > :
> : > : > : Regards,
> : > : > :
> : > : > : ryan
> : > : > :
> : > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> : > : > : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
> : > : > : > What version of IIS are you running? Presumably IIS5? If so,
> did
> : > you
> : > : > put
> : > : > : > .exe into the allowed extensions list in urlscan.ini?
> : > : > : >
> : > : > :
> : > : > : >
> : > : > : > "Ryan" <ryanzome@none.giv> wrote in message
> : > : > : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
> : > : > : > :I have an IIS server running and to my knowledge, has worked
> fine
> : > : > without
> : > : > : > : problems. I used the IID lockdown tool and since, everything
> : > seems
> : > : > fine.
> : > : > : > :
> : > : > : > : Recently it has bee brought to my attention that the .EXE
> will
> : > : > report
> : > : > a
> : > : > : > 404
> : > : > : > : Page Cannont be Diplayed.
> : > : > : > :
> : > : > : > : Things I have tried.
> : > : > : > :
> : > : > : > : Permissions Wizard
> : > : > : > : Adding .exe to the MIME file types with the
> : > application/octet-stream
> : > : > : > : Added a .txt file to the same directory which displayed
> : > correctly
> : > : > : > : Tried accessing and .msi file which was successful
> : > : > : > :
> : > : > : > : It appears that the problem exists with the .exe file
> : > : > : > :
> : > : > : > : I am stumped at this point.
> : > : > : > :
> : > : > : > : Any help would be appreciated...
> : > : > : > :
> : > : > : > : Thanks,
> : > : > : > :
> : > : > : > : ryan
> : > : > : > :
> : > : > : > :
> : > : > : >
> : > : > : >
> : > : > :
> : > : > :
> : > : >
> : > : >
> : > :
> : > :
> : >
> : >
> :
> :
>
>
| |
| Ken Schaefer 2005-05-11, 2:49 am |
| OK, if URLScan is denying the request, can you post the relevant sections of
the URLScan.ini file that you have?
Cheers
Ken
--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Ryan" <ryanzome@none.giv> wrote in message
news:%23ad2WUdVFHA.2560@TK2MSFTNGP10.phx.gbl...
: it is of course, URLScan that is denying the attempt.... I know how to
read
: the IIS logs.
:
: i am not having trouble configuring the INI file. The file's default
values
: from the IIS lockdown tool are there now and the site is working except
for
: the .exe files
:
: as i said the log file shows "rejected by URLScan" when i try to download
: the executables
:
: what is that you want? i'm not sure
:
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: news:ezEis$bVFHA.1508@tk2msftngp13.phx.gbl...
: > OK, first we need to ensure that URLScan is *not* rejecting the
requests.
: > So
: > you need to determine a URLScan configuration that will allow this.
: >
: > Then we need to ensure that IIS is permitting the download. So, if you
are
: > having trouble configuring URLScan.ini then please cut-n-paste the
: > relevant
: > sections of your .ini file.
: >
: > If you have a problem elsewhere, then please clarify that. As you can
see,
: > IIS has a long request processing pipeline, and we need to work out at
: > which
: > point the request is being rejected:
: > http://www.adopenstatic.com/FAQ/IIS...Processing.aspx
: >
: > Cheers
: > Ken
: >
: > --
: > Blog: www.adopenstatic.com/cs/blogs/ken/
: > Web: www.adopenstatic.com
: >
: >
: > "Ryan" <ryanzome@none.giv> wrote in message
: > news:OBr9rTXVFHA.580@TK2MSFTNGP15.phx.gbl...
: > :I have to allow scripts but the website and the default website (from
: > which
: > : all permissions are inherited in this case) are set to allow scripts
: > only
: > : and NOT the "Scripts and Executables" option
: > :
: > : still is not allowing the downloading of executables.... even with
Allow
: > : Extensions= 1 and .exe in the allowed list in urlscan (which according
: > to
: > : the log is most certainly denying the attempt) and with scripts only
set
: > in
: > : IIS MMC
: > :
: > : help!
: > :
: > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > : news:OJj9A7RVFHA.2664@TK2MSFTNGP15.phx.gbl...
: > : > Hi,
: > : >
: > : > It appears that when you have AllowExtensions = 0 URLScan is
blocking
: > the
: > : > requests
: > : >
: > : > When you change AllowExtensions = 1, and add .exe, the request is
: > going
: > : > through to IIS. If the site is then "hanging" you are encountering a
: > : > different issue. I would check to ensure that you do not have
"Scripts
: > and
: > : > Executables" set as the Execute permission for the website/folder in
: > : > question. If you do, then IIS will attempt to run the exe on the
: > server,
: > : > rather than allowing the user to download it. Permission should be
set
: > to
: > : > "scripts only" or "none".
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : > --
: > : > Blog: www.adopenstatic.com/cs/blogs/ken/
: > : > Web: www.adopenstatic.com
: > : >
: > : >
: > : > "Ryan" <ryanzome@none.giv> wrote in message
: > : > news:e9O6bMRVFHA.3212@TK2MSFTNGP10.phx.gbl...
: > : > : IIS reports rejected by URLScan three times... I snapped the link
: > three
: > : > : times in succession and the three GET ***.exe files were rejected
by
: > : > URLscan
: > : > :
: > : > : i changed portions of the urlscan.ini to AllowExtensions=1
: > : > : and i added .exe to the list below in the allowed extensions
: > : > :
: > : > : this brings down the site entirely. when i turn off the Allow
: > extensions
: > : > : (AllowExtensions=0)
: > : > : everything works fine again
: > : > :
: > : > : I'm stumped... It is clear that URLscan is stopping the exe
: > downloads
: > : > but
: > : > i
: > : > : can't seem to enable them... can you post and relevant entries
that
: > i
: > : > may
: > : > be
: > : > : missing???
: > : > :
: > : > : thanks
: > : > :
: > : > : sam
: > : > :
: > : > :
: > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > : > : news:uEW5uMGVFHA.2128@TK2MSFTNGP15.phx.gbl...
: > : > : > OK, two things:
: > : > : >
: > : > : > a) can you post the relevant request entries from the IIS log
: > file.
: > : > : > Generally, if URLScan is rejecting the request, you will see a
: > : > <rejected
: > : > : > by
: > : > : > URLScan> entry in the log
: > : > : >
: > : > : > b) can you post the relevant sections from the URLScan.ini file
: > : > : >
: > : > : > Cheers
: > : > : > Ken
: > : > : >
: > : > : > --
: > : > : > Blog: www.adopenstatic.com/cs/blogs/ken/
: > : > : > Web: www.adopenstatic.com
: > : > : >
: > : > : >
: > : > : > "Ryan" <ryanzome@none.giv> wrote in message
: > : > : > news:Oo83LwFVFHA.3636@TK2MSFTNGP10.phx.gbl...
: > : > : > : Yes, correct IIS 5 with Citrix XP Presentation Server running.
I
: > : > tried
: > : > : > : making every variance of change to the urlscan.ini
: > : > : > :
: > : > : > : is it possible that I did this incorrectly? If I set the
: > : > : > AllowFileExtensions
: > : > : > : value to 1 then only the few extensions listed there are
: > displayed
: > : > (in
: > : > : > some
: > : > : > : instances, i get a blank page)
: > : > : > :
: > : > : > : I am using Windows 2000 with all the latest updates and
service
: > : > packs
: > : > : > and
: > : > : > : Citrix XP Metaframe FR3 with SP3.
: > : > : > :
: > : > : > : anything else? thanks for the response and it still may be
: > correct
: > : > if
: > : > i
: > : > : > did
: > : > : > : something incorrectly.
: > : > : > :
: > : > : > : Regards,
: > : > : > :
: > : > : > : ryan
: > : > : > :
: > : > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in
message
: > : > : > : news:%23ckBkXFVFHA.548@tk2msftngp13.phx.gbl...
: > : > : > : > What version of IIS are you running? Presumably IIS5? If so,
: > did
: > : > you
: > : > : > put
: > : > : > : > .exe into the allowed extensions list in urlscan.ini?
: > : > : > : >
: > : > : > :
: > : > : > : >
: > : > : > : > "Ryan" <ryanzome@none.giv> wrote in message
: > : > : > : > news:OFLoMFAVFHA.1508@tk2msftngp13.phx.gbl...
: > : > : > : > :I have an IIS server running and to my knowledge, has
worked
: > fine
: > : > : > without
: > : > : > : > : problems. I used the IID lockdown tool and since,
everything
: > : > seems
: > : > : > fine.
: > : > : > : > :
: > : > : > : > : Recently it has bee brought to my attention that the .EXE
: > will
: > : > : > report
: > : > : > a
: > : > : > : > 404
: > : > : > : > : Page Cannont be Diplayed.
: > : > : > : > :
: > : > : > : > : Things I have tried.
: > : > : > : > :
: > : > : > : > : Permissions Wizard
: > : > : > : > : Adding .exe to the MIME file types with the
: > : > application/octet-stream
: > : > : > : > : Added a .txt file to the same directory which displayed
: > : > correctly
: > : > : > : > : Tried accessing and .msi file which was successful
: > : > : > : > :
: > : > : > : > : It appears that the problem exists with the .exe file
: > : > : > : > :
: > : > : > : > : I am stumped at this point.
: > : > : > : > :
: > : > : > : > : Any help would be appreciated...
: > : > : > : > :
: > : > : > : > : Thanks,
: > : > : > : > :
: > : > : > : > : ryan
: > : > : > : > :
: > : > : > : > :
: > : > : > : >
: > : > : > : >
: > : > : > :
: > : > : > :
: > : > : >
: > : > : >
: > : > :
: > : > :
: > : >
: > : >
: > :
: > :
: >
: >
:
:
| |
| Raymond Moore 2005-06-24, 5:59 pm |
| Same problem, followed same steps, still have problem. Heres my
urlscan.ini...if anyone sees any problems please let me know. Thanks:
[options]
UseAllowVerbs=1 ; if 1, use [AllowVerbs] section, else
use [DenyVerbs] section
UseAllowExtensions=1 ; if 1, use [AllowExtensions] section,
else use [DenyExtensions] section
NormalizeUrlBeforeScan=1 ; if 1, canonicalize URL before
processing
VerifyNormalization=1 ; if 1, canonicalize URL twice and reject
request if a change occurs
AllowHighBitCharacters=1 ; if 1, allow high bit (ie. UTF8 or MBCS)
characters in URL
AllowDotInPath=1 ; if 1, allow dots that are not file
extensions
RemoveServerHeader=0 ; if 1, remove "Server" header from
response
EnableLogging=1 ; if 1, log UrlScan activity
PerProcessLogging=0 ; if 1, the UrlScan.log filename will
contain a PID (ie. UrlScan.123.log)
AllowLateScanning=0 ; if 1, then UrlScan will load as a low
priority filter.
PerDayLogging=1 ; if 1, UrlScan will produce a new log
each day with activity in the form UrlScan.010101.log
RejectResponseUrl= ; UrlScan will send rejected requests to
the URL specified here. Default is /<Rejected-by-UrlScan>
UseFastPathReject=0 ; If 1, then UrlScan will not use the
RejectResponseUrl or allow IIS to log the request
; If RemoveServerHeader is 0, then AlternateServerName can be
; used to specify a replacement for IIS's built in 'Server' header
AlternateServerName=
[AllowVerbs]
;
; Note that these entries are effective if "UseAllowVerbs=1"
; is set in the [Options] section above.
;
GET
HEAD
POST
OPTIONS
SEARCH
POLL
PROPFIND
BMOVE
BCOPY
SUBSCRIBE
MOVE
PROPPATCH
BPROPPATCH
DELETE
BDELETE
MKCOL
UNSUBSCRIBE
SUBSCRIPTIONS
COPY
LOCK
UNLOCK
PUT
ACL
NOTIFY
[DenyVerbs]
;
; Note that these entries are effective if "UseAllowVerbs=0"
; is set in the [Options] section above.
;
[DenyHeaders]
;
; Request headers listed in this section will cause UrlScan to
; reject any request in which they are present.
;
; Headers should be listed in the form
; Header-Name:
;
[AllowExtensions]
;
; Extensions listed here are commonly used on a typical IIS server.
;
; Note that these entries are effective if "UseAllowExtensions=1"
; is set in the [Options] section above.
;
.exe
.asp
.cer
.cdx
.asa
.htm
.html
.txt
.jpg
.jpeg
.gif
.idq
.htw
.ida
;.idc
;.shtm
;.shtml
;.stm
;.htr
;.printer
[DenyExtensions]
;
; Extensions listed here either run code directly on the server,
; are processed as scripts, or are static files that are
; generally not intended to be served out.
;
; Note that these entries are effective if "UseAllowExtensions=0"
; is set in the [Options] section above.
;
; Deny executables that could run on the server
.bat
.cmd
.com
; Deny infrequently used scripts
;.htw ; Maps to webhits.dll, part of Index Server
;.ida ; Maps to idq.dll, part of Index Server
;.idq ; Maps to idq.dll, part of Index Server
.htr ; Maps to ism.dll, a legacy administrative tool
.idc ; Maps to httpodbc.dll, a legacy database access tool
.shtm ; Maps to ssinc.dll, for Server Side Includes
.shtml ; Maps to ssinc.dll, for Server Side Includes
.stm ; Maps to ssinc.dll, for Server Side Includes
.printer ; Maps to msw3prt.dll, for Internet Printing Services
; Deny various static files
.ini ; Configuration files
.log ; Log files
.pol ; Policy files
.dat ; Configuration files
;.asp
;.cer
;.cdx
;.asa
[DenyUrlSequences]
.. ; Don't allow directory traversals
./ ; Don't allow trailing dot on a directory name
\ ; Don't allow backslashes in URL
% ; Don't allow escaping after normalization
& ; Don't allow multiple CGI processes to run on a single request
root.exe
Also have same problem in IIS4.0.
THANKS 
*** Sent via Developersdex http://www.codecomments.com ***
|
|
|
|
|