IIS Server Security - Re: IIS Downloads

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > August 2006 > Re: IIS Downloads





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Re: IIS Downloads
Chris Marsh

2006-08-25, 1:25 pm

Hi David,

Well I guess I would have been loosing that $245 bet:-) Yes, I must have
configured them just slightly differently because I got back in town form a
week a travel I read your blog and bingo in your short answer section #1 was
my answer. I am so used to setting up IIS for my DotNet 2.0 that require
Scripts and Exe's that I setup my download page the exact same way.

"If you want to allow .exe files to be downloaded as-is to the browser, then
you must NOT have "Scripts and Executables" as Execute Permissions."

Thank you for hanging in there and getting me straight!

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:OHZ32D3wGHA.5064@TK2MSFTNGP06.phx.gbl...
> http://blogs.msdn.com/david.wang/ar...s_on_IIS_6.aspx
>
> I will bet you $245 that you did not configure the new server like the old
> server when it comes to this table of downloads. ;-) So it does not
> surprise me that the results are different. For .exe files, if you had a
> table of downloads on prior IIS servers, then if you configure IIS6 in the
> EXACT same way, you will also have a table of downloads. By default.
>
> Think about it this way -
> When you make a request to
> http://www.synergy-intl.com/support...sv8/sv8_sql.exe , how does
> IIS know to either:
> 1. send sv8_sql.exe to client as a binary stream download
> 2. execute sv8_sql.exe on server to generate response
>
> Because people DO want both types of behaviors, so IIS gives you choice.
> But now you must make sure you configure it the way you want -- and here
> is where people frequently make the wrong assumption. They assume that
> servers can read minds to magically determine the correct configuration --
> whether you want this file to be downloadable and that file to execute.
>
> Now, I think it is worth $245 for me to dispel that pipe-dream, because
> how could you believe it in the first place? ;-)
>
> I suggest reading the following:
> 1. HOWTO Troubleshoot IIS
> http://blogs.msdn.com/david.wang/ar...leshooting.aspx
> 2. HOWTO Understand IIS Request Processing
> http://blogs.msdn.com/david.wang/ar...003_Part_2.aspx
>
> They should also lead you to the same conclusions.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
>
> "Chris Marsh" <cmarsh@synergy-intl.com> wrote in message
> news:ue6NJFXwGHA.4920@TK2MSFTNGP06.phx.gbl...
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com