IIS Server Security - 404.dll functionality in IIS6?

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > August 2005 > 404.dll functionality in IIS6?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author 404.dll functionality in IIS6?
Sean S - Perth, WA

2005-08-18, 7:50 am

Hi all,

I have an IIS6 site that will run ASP.NET that has a folder in which I need
to explicitly block all possibility of code running or being downloaded
(unsupervised novice web authors).

In IIS5 this was easy using 404.dll. I'm aware of HttpForbiddenHandler but
I'm not happy with the way this handles denied files. Or writing web.config
files.

How can this same functionality be had in IIS6?

--
Sean.
Jonathan Maltz [MS-MVP]

2005-08-18, 7:50 am

Hi,

Why not set the "execute" permissions to "none" for that directory?

--
--Jonathan Maltz [Microsoft MVP - Windows Server - IIS, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.


"Sean S - Perth, WA" <SeanSPerthWA@discussions.microsoft.com> wrote in
message news:21CC89EA-1D0E-4D0B-B38B-83C6DDDF2913@microsoft.com...
> Hi all,
>
> I have an IIS6 site that will run ASP.NET that has a folder in which I
> need
> to explicitly block all possibility of code running or being downloaded
> (unsupervised novice web authors).
>
> In IIS5 this was easy using 404.dll. I'm aware of HttpForbiddenHandler but
> I'm not happy with the way this handles denied files. Or writing
> web.config
> files.
>
> How can this same functionality be had in IIS6?
>
> --
> Sean.


Sean S - Perth, WA

2005-08-18, 7:50 am

"Jonathan Maltz [MS-MVP]" wrote:

> Why not set the "execute" permissions to "none" for that directory?


I forgot to mention I also need SSI to work.

--
Sean.

Sean S - Perth, WA

2005-08-18, 7:50 am

OK, after some 'quick n dirty' testing it seems that IIS6 defaults to a 404
when it doesn't have an explicit handler defined for a dynamic content file.

I guess that's problem solved.

--
Sean.


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com