Re: Blocking EXE

From: H Branyan (hbranyan.SPAMBLOCK_at_merc.mercer.edu)
Date: 06/23/03


Date: Mon, 23 Jun 2003 14:12:12 -0400


Thank you David. "Scripts and Executables" was enabled on the particular
directory in question and after changing it to "Scripts only", the .exe's
were able to be downloaded.

--
H Branyan
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:u#eB#J8NDHA.2460@TK2MSFTNGP10.phx.gbl...
> If a .EXE file is published from a Website, a URL to the .EXE file will
> either be executed or downloaded.
>
> This determination is made by the "Execute Permissions" setting on the
> application/vdir containing the .EXE file.  If set to "Scripts and
> Executables", then access to the .EXE from a URL will cause the .EXE to
> attempt to be run on the webserver (this may or may not succeed/be
> possible).  If set to "Scripts" or "None" and "Read" is still allowed,
then
> the .EXE file will be downloaded.
>
> URLScan adds an additional ability whereby it can be configured to cause
all
> requests to .EXE files to fail with a 404, thus preventing both
downloading
> and server-side execution.
>
> My suspicion is that either URLScan is installed to block .EXE access with
a
> 404, or someone changed the webserver configuration to cause the EXE to
run
> on the webserver (i.e. "Scripts and Executables"), and the EXE failed to
run
> for arbitrary reason.
>
> --
> //David
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "H Branyan" <hbranyan.SPAMBLOCK@merc.mercer.edu> wrote in message
> news:bcvp53$nifii$1@ID-92475.news.dfncis.de...
> Would there be a setting in IIS or on the network somewhere to block a
user
> from downloading an EXE from a website?  My company is trying to
> troubleshoot this for a remote location and I've never seen this problem
> before.
>
> Thanks!
>
> --
> H Branyan
>
>
>
>

Quantcast