Re: Protect EXE using defaulthttphandler? More options

I misunderstood your question. I thought you need to download the file. I had to configure IIS because I was using the Updater Application Block. I am not sure how to directly execute the file via a URL. In the past, I wrote aspx pages that would be called from the browser and in turn, the pages used the Process class to pass parameters to and run executables. I hope this helps.

--
Bryan Phillips
MCSD, MCDBA, MCSE
Blog: http://bphillips76.spaces.live.com



"AndyFel" <AndyFel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:661DB69E-169F-416E-A89A-2F910697D90C@xxxxxxxxxxxxx:

Thanks for the suggestion, perhaps I am missing something completely.... But
why would setting a MIME type make it work? I thought these were just to tell
the browser how it would be downloaded.

Anyway I did check the mime types and .exe is set to application/octet-stream.

I do not want to download the file, which I can do if i set the web.config
line to staticfilehandler, i want to execute the exe on the server and get it
to do its stuff and return its results via IIS. Which it does fine when I am
not trying to secure it.

Any other ideas.....
Thanks




"Bryan Phillips" wrote:

> You don't need the line, but you do need to configure IIS with a MIME
> extension for exe so it knows to server exe files when requested.
>
> --
> Bryan Phillips
> MCSD, MCDBA, MCSE
> Blog: http://bphillips76.spaces.live.com
>
>
>
> "AndyFel" <AndyFel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:FC5ED17D-3C68-4DBB-BB41-DA2A6C3C4B18@xxxxxxxxxxxxx:
>
> > Hi
> >
> > I have a website which i have secured using forms authentication. I
> > have also secured htm, pdf, doc, xls files using the httphandlers
> > section in the web.config and routing the requests from IIS thru
> > dotnet.
> >
> > Now I need to secure a .exe application in a subdir. I have made it so
> > we have to login, but I cannot get the application to run.... I have
> > tried using the defaulthttphandler in the web.config but the browser
> > just says the page is unreachable.
> >
> > The .exe is a third party product so we cannot change it. Its
> > basically some sort of cgi app which works fine if we just call it via
> > the url http:\fred\gateway.exe?someparams (and remove the mapping in
> > IIS).
> >
> > Do i need to write my own httphandler to execute the exe and return
> > the web page. If so has anyone done this and can give an example?
> >
> > The line in the web.config in the httphandlers section i currently
> > have is
> > <add path="*.exe" verb="*" type="System.Web.DefaultHttpHandler"
> > validate="true" />
> >
> > Please tell me this can be done or the line above is incorrect.......
> >
> > Thanks
>
>

.

Relevant Pages

  • Re: Cantt download "exe" file because of IIS version
    ... with IIS and can completely alter IIS behavior in arbitrary manners, ... cut out the EXE download and just standardize the installation using your ... As far as I can tell, we are only running Tomcat as an ISAPI application. ...
    (microsoft.public.inetserver.iis)
  • Re: Cantt download "exe" file because of IIS version
    ... I removed the MIME type for EXE. ... Went back to IIS Manager and started at the top of the Web Site Hierarchy ... > IE does have some code to detect download type, extension, and content-type, ...
    (microsoft.public.inetserver.iis)
  • Re: Cantt download "exe" file because of IIS version
    ... The default MIME Type in IIS for .exe is application/octet-stream. ... When I looked at the download type it was still set to the MIME type that I just removed. ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 6 not servicing .exe
    ... perimission issue coz I even tried to give everyone Full Control I still ... couldn't download the exe files off the website. ... couldn't download anything except for html,text,graphic, etc. ... guessing it's a IIS security feature or somthing disabling access thru http ...
    (microsoft.public.windows.server.setup)
  • Re: Protect EXE using defaulthttphandler? More options
    ... I had to configure IIS because I was using the Updater Application ... I am not sure how to directly execute the file via a URL. ... Anyway I did check the mime types and .exe is set to application/octet-stream. ... Now I need to secure a .exe application in a subdir. ...
    (microsoft.public.vsnet.general)