all groups > iis security > june 2003 >
You're in the

iis security

group:

Blocking .EXE


Blocking .EXE Dave
6/30/2003 7:56:06 AM
iis security:
I get a 404, file not found, when browsing a .exe file on
an IIS 6 win2k3 site: IIS5 executed it fine.

URLSCAN not installed, though this behavior is the same as
an earlier post (June20) referred.

If I set the folder perms to "scripts only" then I get the
dialog box asking if I want to download the .exe or .dll
file. So, the behavior seen is as-if I were running
URLSCAN and it was blocking with a 404 message.

Does IIS 6 have URLSCAN built-in or ????

Re: Blocking .EXE Dave
6/30/2003 9:08:32 AM
hmmmmm... I checked that first thing, in IIS services
mmc, and the .exe file type is a registered mime type in
the list for the server.

That seems to contradict the verbiage in the KB article
reference, but there's a list of mime-types just like
previous versions, and .exe is one of them...

?

I also found some GPO references about "adjusting memory
quotas", and "replacing process level tokens" in the IIS 6
help, and I've done those without changing the result.

Still poking around,
dave
[quoted text, click to view]
Re: Blocking .EXE dave
6/30/2003 11:21:27 AM
OK, I found it: in the IIS 6 help I must admit.

In order to run CGI applications, you must go to the IIS
mgr, highlight the server, and then web service extensions
folder. You can then "allow" all cgi, or, what I did,
is explicitly allow just the one executable you'd like to
run by specifically entering the path, and then the 404s
go away... You must, of course, do all the other
file/folder perms and such as before, but this step as
well.

dave


[quoted text, click to view]
Re: Blocking .EXE Tom Kaminski [MVP]
6/30/2003 11:47:46 AM
[quoted text, click to view]

Yes it does. I think you need to allow the mime-type to be served.
http://support.microsoft.com/default.aspx?scid=kb;en-us;326965

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/


Re: Blocking .EXE David Wang [Msft]
6/30/2003 9:09:41 PM
woohoo! Someone who reads the IIS6 Help! :-)

There's lots of useful tips in the Troubleshooting section. As well as
reading just the section on App Pools will save you some headache later on
should you start using more of IIS6's capabilities.

--
//David
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
OK, I found it: in the IIS 6 help I must admit.

In order to run CGI applications, you must go to the IIS
mgr, highlight the server, and then web service extensions
folder. You can then "allow" all cgi, or, what I did,
is explicitly allow just the one executable you'd like to
run by specifically entering the path, and then the 404s
go away... You must, of course, do all the other
file/folder perms and such as before, but this step as
well.

dave


[quoted text, click to view]

Re: Blocking .EXE dave
7/1/2003 12:07:25 PM

well, only as a last resort, you understand. Which of the
web extension prohibitions keeps the frontpage web search
gadget from working ? idq files, getting a 405.....

?


[quoted text, click to view]
Re: Blocking .EXE David Wang [Msft]
7/1/2003 8:08:50 PM
A "405 Method Not Allowed" usually means that you're trying to POST against
a URL that is deemed a static file by IIS.

What that means is that .idq files (or whatever FPSE needs for Web Search)
is not registered as a ScriptMap (so it's treated as a static file instead).
Index Server isn't installed by default, so you'll have to make sure to
install it (which should set up the ScriptMap) and enable it. You have to
do the same with FrontPage.

--
//David
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]

well, only as a last resort, you understand. Which of the
web extension prohibitions keeps the frontpage web search
gadget from working ? idq files, getting a 405.....

?


[quoted text, click to view]

AddThis Social Bookmark Button