Groups | Blog | Home
all groups > iis security > october 2004 >

iis security : IIS 6.0 exe/dll download from /bin directory


marko
10/21/2004 4:07:10 PM
I have added MIME types for .exe and .dll's that are placed in one virtual
directory. It is called /bin (it has nothing to do with ASP.NET
applications).
I just want to enable *downloads* of exe and dll files from that directory,
and I can't. From other directories there are no problems, but from that I
get error 404-not found. What to do to enable that?

m.

Ken Schaefer
10/22/2004 10:13:56 AM
You will need to remove the ASPNET_ISAPI filter. That scans incoming
requests for references to files in /bin and blocks them all. /bin is a
folder that's supposed to be where you store your .net assemblies, so access
to this folder is "blocked". In IIS5 the ASP.NET worker process changed the
access flags for this folder. Since ASP.NET worker process doesn't have this
permission on IIS6, instead an ISAPI filter is used to block requests. This
same ISAPI filter also provides cookie-less session support, so be aware of
what you're disabling if you remove it. More information in the .NET
Framework ASK.

Cheers
Ken

[quoted text, click to view]

AddThis Social Bookmark Button