|
Home > Archive > IIS Server Security > July 2004 > IIS Bin folder Hiding automatically
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS Bin folder Hiding automatically
|
|
| Nisar C.K 2004-07-19, 5:56 pm |
| We have several ASP.NET project running on external
server, the problem we face is all bin folder on this
server get hidden so this reason all asp.net project get
error saying bin folder doesn't found couldn't access any
site. Whenever we create bin folder this get hidden and we
can access thru command prompt only doesn't have any
hidden attribute set for this folder. Please Help
| |
| Ken Schaefer 2004-07-19, 5:56 pm |
| What do you mean "hidden"? How do you know that it's "hidden"?
There is an ISAPI filter that will prevent HTTP requests to /bin folder on
IIS 6.0, but the folder itself should not be hidden.
Cheers
Ken
"Nisar C.K" <nisarck@hotmail.com> wrote in message
news:006901c46dc1$860e8230$a501280a@phx.gbl...
> We have several ASP.NET project running on external
> server, the problem we face is all bin folder on this
> server get hidden so this reason all asp.net project get
> error saying bin folder doesn't found couldn't access any
> site. Whenever we create bin folder this get hidden and we
> can access thru command prompt only doesn't have any
> hidden attribute set for this folder. Please Help
| |
| David Wang [Msft] 2004-07-21, 2:48 am |
| The behavior is by-design.
If you have ASP.Net projects that make URL-level references to /bin, your
application is broken and needs to be fixed. The bin directory is not meant
to store website resources that are accessible via a URL. It is only meant
to be access via the filesystem. Put your graphics, HTMs, etc elsewhere.
On IIS5, ASP.Net will actively change metabase property to prevent IIS from
showing the bin directory. On IIS6, ASP.Net cannot change the metabase, so
it actively filters all URL preventing access to /bin URL. Neither behavior
are configurable/changeable, and do not try to circumvent them.
--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:OwDirsebEHA.1408@TK2MSFTNGP12.phx.gbl...
What do you mean "hidden"? How do you know that it's "hidden"?
There is an ISAPI filter that will prevent HTTP requests to /bin folder on
IIS 6.0, but the folder itself should not be hidden.
Cheers
Ken
"Nisar C.K" <nisarck@hotmail.com> wrote in message
news:006901c46dc1$860e8230$a501280a@phx.gbl...
> We have several ASP.NET project running on external
> server, the problem we face is all bin folder on this
> server get hidden so this reason all asp.net project get
> error saying bin folder doesn't found couldn't access any
> site. Whenever we create bin folder this get hidden and we
> can access thru command prompt only doesn't have any
> hidden attribute set for this folder. Please Help
| |
| Bernard 2004-07-21, 7:53 am |
| You can change it with,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AS
P.NET]
"StopBinFiltering"=dword:00000001
but not recommended.
--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:eC5PZ0ubEHA.2352@TK2MSFTNGP09.phx.gbl...
> The behavior is by-design.
>
> If you have ASP.Net projects that make URL-level references to /bin, your
> application is broken and needs to be fixed. The bin directory is not
meant
> to store website resources that are accessible via a URL. It is only
meant
> to be access via the filesystem. Put your graphics, HTMs, etc elsewhere.
>
> On IIS5, ASP.Net will actively change metabase property to prevent IIS
from
> showing the bin directory. On IIS6, ASP.Net cannot change the metabase,
so
> it actively filters all URL preventing access to /bin URL. Neither
behavior
> are configurable/changeable, and do not try to circumvent them.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> news:OwDirsebEHA.1408@TK2MSFTNGP12.phx.gbl...
> What do you mean "hidden"? How do you know that it's "hidden"?
>
> There is an ISAPI filter that will prevent HTTP requests to /bin folder on
> IIS 6.0, but the folder itself should not be hidden.
>
> Cheers
> Ken
>
> "Nisar C.K" <nisarck@hotmail.com> wrote in message
> news:006901c46dc1$860e8230$a501280a@phx.gbl...
>
>
>
>
| |
| Jerry Pisk 2004-07-21, 5:57 pm |
| And to add to this - in Asp.Net 2.0 there are more magic folders - data and
code and maybe more? Is this documented anywhere? I haven't found anything
about the bin directory being inaccessible either 
Jerry
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:eC5PZ0ubEHA.2352@TK2MSFTNGP09.phx.gbl...
> The behavior is by-design.
>
> If you have ASP.Net projects that make URL-level references to /bin, your
> application is broken and needs to be fixed. The bin directory is not
> meant
> to store website resources that are accessible via a URL. It is only
> meant
> to be access via the filesystem. Put your graphics, HTMs, etc elsewhere.
>
> On IIS5, ASP.Net will actively change metabase property to prevent IIS
> from
> showing the bin directory. On IIS6, ASP.Net cannot change the metabase,
> so
> it actively filters all URL preventing access to /bin URL. Neither
> behavior
> are configurable/changeable, and do not try to circumvent them.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
> "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> news:OwDirsebEHA.1408@TK2MSFTNGP12.phx.gbl...
> What do you mean "hidden"? How do you know that it's "hidden"?
>
> There is an ISAPI filter that will prevent HTTP requests to /bin folder on
> IIS 6.0, but the folder itself should not be hidden.
>
> Cheers
> Ken
>
> "Nisar C.K" <nisarck@hotmail.com> wrote in message
> news:006901c46dc1$860e8230$a501280a@phx.gbl...
>
>
>
>
| |
| Paul Lynch 2004-07-21, 5:57 pm |
| On Wed, 21 Jul 2004 09:18:26 -0700, "Jerry Pisk"
<jerryiii@hotmail.com> wrote:
>And to add to this - in Asp.Net 2.0 there are more magic folders - data and
>code and maybe more? Is this documented anywhere? I haven't found anything
>about the bin directory being inaccessible either
>
>Jerry
Jerry,
Try this :
All requests with /bin in the URL are rejected and return a 404 error
http://www.microsoft.com/resources/...leshooting.mspx
Regards,
Paul Lynch
MCSE
| |
| Ken Schaefer 2004-07-21, 8:48 pm |
| All of this is documented. Look in the .NET Framework SDK
Cheers
Ken
"Jerry Pisk" <jerryiii@hotmail.com> wrote in message
news:eQuTY5zbEHA.556@tk2msftngp13.phx.gbl...
> And to add to this - in Asp.Net 2.0 there are more magic folders - data
and
> code and maybe more? Is this documented anywhere? I haven't found anything
> about the bin directory being inaccessible either
>
> Jerry
>
> "David Wang [Msft]" <someone@online.microsoft.com> wrote in message
> news:eC5PZ0ubEHA.2352@TK2MSFTNGP09.phx.gbl...
your[vbcol=seagreen]
elsewhere.[vbcol=seagreen]
on[vbcol=seagreen]
>
>
| |
| Jerry Pisk 2004-07-22, 8:47 pm |
| I did look, would you mind posting a link? I did find topics like this:
ms-help://MS.NETFramework.v20.en/dv_vwdcon/html/3ef36871-2cb9-452a-8c96-2068fccead18.htm
or
ms-help://MS.NETFramework.v20.en/dv_aspnetcon/html/40130404-8509-4efa-b4db-36ebaaba5b62.htm
But absolutely nothing about an ISAPI filter returning 404 to any requests
to those folders. Paul's reference is to an IIS documentation, not .Net,
which is probably why I didn't know about that and why it isn't updated for
..Net 2.0 to include the new folders.
Jerry
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:u6PuFY4bEHA.644@tk2msftngp13.phx.gbl...
> All of this is documented. Look in the .NET Framework SDK
>
> Cheers
> Ken
>
> "Jerry Pisk" <jerryiii@hotmail.com> wrote in message
> news:eQuTY5zbEHA.556@tk2msftngp13.phx.gbl...
> and
> your
> elsewhere.
> on
>
>
|
|
|
|
|