Re: 404 error for certain extension on IIS 6

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Chris (mail_at_example.com)
Date: 12/30/04


Date: Thu, 30 Dec 2004 10:43:32 -0500

Thanks, that did it!

Chris

Kristofer Gafvert wrote:
> Hello,
>
> IIS 6.0 does not serve unknown extensions by default. This is a new
> security feature.
>
> So you need to manually allow this file to be served. To do this:
>
> - Open IIS Manager.
> - Right click the servername/website/folder (depending on how wide you
> want this to apply), and click Properties.
> - If you selected the servername, click the MIME Types button,
> otherwise, click the HTTP Headers tab, and then click the Mime Types
> button.
> - Click New button.
> - For extension, type ".rtp" (without the quotes)
> - For MIME Type, type "application/octet-stream" (without the quotes)
>
>
> I recommend you to not apply this globally (setting it on the
> servername), unless you really need it. This is to keep maximum
> security.
>
> (Although this setting does not impact security, but if you for example
> use the wildcard * as extension and set it on the "servername", then i
> would call it a security issue.)
>
> Good Luck!
>
>



Relevant Pages

  • Re: Mac Server Hacked In Less Than 6 Hours
    ... Windows has RAS, and for it is built in since NT 3.1 ... | A typical IIS box and this Mac are not the same thing so the comparison ... IIS has been subject to quite a few bugs and so have ... Security isn't a proprietary attribute. ...
    (sci.crypt)
  • Re: DCOM calls fails - access denied
    ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to secure IIS?
    ... XP as well, because even if you don't install IIS, there are still a number ... If you think Windows 98 is secure, ... easy to attack, if there's no firewall... ... IIS security checklists] 3) install firewall and antivirus, ...
    (microsoft.public.inetserver.iis.security)
  • Re: 404 error for certain extension on IIS 6
    ... IIS 6.0 does not serve unknown extensions by default. ... security feature. ... otherwise, click the HTTP Headers tab, and then click the Mime Types ... For extension, ...
    (microsoft.public.inetserver.iis)
  • RE: .pdf security using ASP.NET security...
    ... I am wondering if using the aspnet_isapi.dll to handle PDF files security ... IIS has a list of Application Mappings which dictate whether a particular ... entries that tell aspnet_isapi.dll what to do with various file types. ... Files that do have app mappings require all the same steps, ...
    (microsoft.public.dotnet.framework.aspnet.security)