Re: Securing Huge Downloads using IIS, aspnet_isapi.dll, HttpHandler...

From: Ken Cox [Microsoft MVP] (BANSPAMken_cox_at_sympatico.ca)
Date: 02/19/04 

Date: Wed, 18 Feb 2004 22:03:25 -0500

If you have a solid budget, FileUPEE is a commercial product that supports
large downloads like that over HTTP. It believe it offloads processing of
the secure files.

www.softartisans.com

"Earl Teigrob" <earlt777@hotmail.com> wrote in message
news:elDqNHn9DHA.1268@TK2MSFTNGP12.phx.gbl...
> My company sells software and wants to provide downloadable product. Some
> of
> these downloads will be full CD's of over 550M
>
> I had everything working fine using Response.filewrite() but when we
> tested
> it with large files, it blew up. (crashed the server, well documented
> problem)
>
> I can download a file just fine if I just point to the download file and
> let
> IIS generate the download dialog (but with no security, of course)
>
> In order to add security, I set up IIS to forward the request for a page
> to
> aspnet_isapi.dll to let it handle security via a authentication ticket.
> I can actually get the security part working fine but when the user has
> rights to download the file, then asp.net tries to process the file (using
> the default HttpHandler, i imagine) and everything crawls to a stop.
> Ideally
> I would like to send the page back to IIS for processing if asp.net
> security
> passes. Is there a way to do this? Can I create an HttpHandler that
> basically sends the page back to IIS? If not, what HttpHandler to I use to
> bring up the download dialog to the user and then download the file? ...or
> do I need to create my own, and what would it look like?
>
> Thanks
>
> Earl
>
>
>
>
>

Relevant Pages

  • Re: File extensions spoofable in MSIE download dialog
    ... File extensions spoofable in MSIE download dialog ... I don't have internet explorer to test but rfc 2616 describes some "security considerations". ... > extension without a sign of EXE, and issue no Security Warning dialog ...
    (Bugtraq)
  • Re: Some mail opens a blank page
    ... YW, Dan, and thanks again for your valuable feedback. ... Save that download link and Product or User ID for CA Internet Security ... and then run the Removal Tool to rid the machine of all Norton crapware. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Securing Huge Downloads using IIS, aspnet_isapi.dll, HttpHandler...
    ... asp.net works by iis opening a pipe to the worker process. ... the request to the worker process which pipe the response back. ... > I can download a file just fine if I just point to the download file and ... > IIS generate the download dialog (but with no security, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Short List of Security Questions
    ... Do you have a list of recommendations for windows? ... I think there are three separate aspects to PC security: ... get and download the latest Firefox and Thunderbird. ...
    (microsoft.public.security)
  • RE: Smiley central Active X controls
    ... security setting was selected. ... It still will not allow me to download ... Does NOT monitor behavior on the Internet ... Why some spyware services may mistake Fun Web Products and its MyWebSearch ...
    (microsoft.public.windowsxp.help_and_support)