Securing Huge Downloads using IIS, aspnet_isapi.dll, HttpHandler...

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Earl Teigrob (earlt777_at_hotmail.com)
Date: 02/18/04 

Date: Wed, 18 Feb 2004 16:50:53 -0600

My company sells software and wants to provide downloadable product. Some of
these downloads will be full CD's of over 550M

 I had everything working fine using Response.filewrite() but when we tested
it with large files, it blew up. (crashed the server, well documented
problem)

I can download a file just fine if I just point to the download file and let
IIS generate the download dialog (but with no security, of course)

In order to add security, I set up IIS to forward the request for a page to
aspnet_isapi.dll to let it handle security via a authentication ticket.
I can actually get the security part working fine but when the user has
rights to download the file, then asp.net tries to process the file (using
the default HttpHandler, i imagine) and everything crawls to a stop. Ideally
I would like to send the page back to IIS for processing if asp.net security
passes. Is there a way to do this? Can I create an HttpHandler that
basically sends the page back to IIS? If not, what HttpHandler to I use to
bring up the download dialog to the user and then download the file? ...or
do I need to create my own, and what would it look like?

Thanks

Earl

Relevant Pages

  • Re: File extensions spoofable in MSIE download dialog
    ... File extensions spoofable in MSIE download dialog ... I don't have internet explorer to test but rfc 2616 describes some "security considerations". ... > extension without a sign of EXE, and issue no Security Warning dialog ...
    (Bugtraq)
  • Re: Some mail opens a blank page
    ... YW, Dan, and thanks again for your valuable feedback. ... Save that download link and Product or User ID for CA Internet Security ... and then run the Removal Tool to rid the machine of all Norton crapware. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Securing Huge Downloads using IIS, aspnet_isapi.dll, HttpHandler...
    ... asp.net works by iis opening a pipe to the worker process. ... the request to the worker process which pipe the response back. ... > I can download a file just fine if I just point to the download file and ... > IIS generate the download dialog (but with no security, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Short List of Security Questions
    ... Do you have a list of recommendations for windows? ... I think there are three separate aspects to PC security: ... get and download the latest Firefox and Thunderbird. ...
    (microsoft.public.security)
  • Re: Most recent OSX Viruses.
    ... Apple has updated Java for Mac OS X 10.5 and 10.6 addressing several ... security issues. ... Software Update in System Preferences or download directly from the Apple ...
    (comp.sys.mac.advocacy)