Re: downloading .exe from website

2004-05-05 Thread Doug White
You would have to modify your URLScan.ini file to allow the .exe extension, but
then you open up your server to much nastiness.

Better to make it a zip file and instruct the user to rename it before
executing.

==
We can get rid of spam on your domain! , Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
==

  - Original Message - 
  From: Tony Weeg
  To: CF-Talk
  Sent: Wednesday, May 05, 2004 2:09 PM
  Subject: RE: downloading .exe from website

  ok..

  how to revert back, with that option ok?

  thanks.
  tony

  -Original Message-
  From: Doug White [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, May 05, 2004 2:35 PM
  To: CF-Talk
  Subject: Re: downloading .exe from website

  URLScan, the ISAPI filter denies extensions of .exe by default.

  It comes with IIS lockdown

  ==
  We can get rid of spam on your domain! , Anti-spam solutions
  http://www.clickdoug.com/mailfilter.cfm
  For hosting solutions http://www.clickdoug.com
  ==

    - Original Message -
    From: Tony Weeg
    To: CF-Talk
    Sent: Wednesday, May 05, 2004 11:01 AM
    Subject: RE: downloading .exe from website

    we ran iis lockdown, which probably has prevented this?

    maybe, ill look @ that dir and see whats up.

    thanks!

    tony

    -Original Message-
    From: Mark W. Breneman [mailto:[EMAIL PROTECTED]
    Sent: Wednesday, May 05, 2004 12:00 PM
    To: CF-Talk
    Subject: RE: downloading .exe from website

    Hey Tony,

    If I recall correctly the Ezest was is to put the .exe in a folder then in
    IIS turn off all execute permissions for that folder via the IIS admin tab
    "directory"

    MB

    Mark W. Breneman
    -Cold Fusion Developer
    -Network Administrator
  Vivid Media
  [EMAIL PROTECTED]
  www.vividmedia.com
  608.270.9770

  _

    From: Tony Weeg [mailto:[EMAIL PROTECTED]
    Sent: Wednesday, May 05, 2004 10:52 AM
    To: CF-Talk
    Subject: downloading .exe from website

    hi there.

    its been a while since I had to rebuild an iis/cfmx server...

    whats the thing I have to do to make it so that .exe files are
  downloadable
    from my server?

    or is there nothing, and I just need to work on some other problem here?

    thanks.x

    ...tony

    tony weeg
    senior web applications architect
    navtrak, inc.
    www.navtrak.net
    [EMAIL PROTECTED]
    410.548.2337

  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Mike Townend
check urlscan.ini usually found somewhere like
c:\winnt\system32\inetsvr\urlscan\ it will probably have .exe files as not
allowed

-Original Message-
From: Tony Weeg [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 5, 2004 18:04
To: CF-Talk
Subject: RE: downloading .exe from website

its iis 5.0

and for the life of me I cant figure out why this focker isnt working???

hmmm...

let me know if you all think of anything else.

thanks!
tony 

-Original Message-
From: Gaulin, Mark [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 12:45 PM
To: CF-Talk
Subject: RE: downloading .exe from website

If we're talking about IIS 6.0 then you need to explicitly add a MIME entry
for the file extension. This is a new security feature of IIS 6.0.

    Mark

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 12:28 PM
To: CF-Talk
Subject: RE: downloading .exe from website

> its actually not even in the list?

I'm sure it is somewhere. Within the IIS management console, check the ISAPI
extensions for the virtual directory, if there is one, then check for the
specific site, then check for the Global Web Site.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
  _ 
  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Tony Weeg
ok..

how to revert back, with that option ok?

thanks.
tony 

-Original Message-
From: Doug White [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 2:35 PM
To: CF-Talk
Subject: Re: downloading .exe from website

URLScan, the ISAPI filter denies extensions of .exe by default.

It comes with IIS lockdown

==
We can get rid of spam on your domain! , Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
==

  - Original Message -
  From: Tony Weeg
  To: CF-Talk
  Sent: Wednesday, May 05, 2004 11:01 AM
  Subject: RE: downloading .exe from website

  we ran iis lockdown, which probably has prevented this?

  maybe, ill look @ that dir and see whats up.

  thanks!

  tony

  -Original Message-
  From: Mark W. Breneman [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, May 05, 2004 12:00 PM
  To: CF-Talk
  Subject: RE: downloading .exe from website

  Hey Tony,

  If I recall correctly the Ezest was is to put the .exe in a folder then in
  IIS turn off all execute permissions for that folder via the IIS admin tab
  "directory"

  MB

  Mark W. Breneman
  -Cold Fusion Developer
  -Network Administrator
    Vivid Media
    [EMAIL PROTECTED]
    www.vividmedia.com
    608.270.9770

    _

  From: Tony Weeg [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, May 05, 2004 10:52 AM
  To: CF-Talk
  Subject: downloading .exe from website

  hi there.

  its been a while since I had to rebuild an iis/cfmx server...

  whats the thing I have to do to make it so that .exe files are
downloadable
  from my server?

  or is there nothing, and I just need to work on some other problem here?

  thanks.x

  ...tony

  tony weeg
  senior web applications architect
  navtrak, inc.
  www.navtrak.net
  [EMAIL PROTECTED]
  410.548.2337

    _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: downloading .exe from website

2004-05-05 Thread Doug White
URLScan, the ISAPI filter denies extensions of .exe by default.

It comes with IIS lockdown

==
We can get rid of spam on your domain! , Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
==

  - Original Message - 
  From: Tony Weeg
  To: CF-Talk
  Sent: Wednesday, May 05, 2004 11:01 AM
  Subject: RE: downloading .exe from website

  we ran iis lockdown, which probably has prevented this?

  maybe, ill look @ that dir and see whats up.

  thanks!

  tony

  -Original Message-
  From: Mark W. Breneman [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, May 05, 2004 12:00 PM
  To: CF-Talk
  Subject: RE: downloading .exe from website

  Hey Tony,

  If I recall correctly the Ezest was is to put the .exe in a folder then in
  IIS turn off all execute permissions for that folder via the IIS admin tab
  "directory"

  MB

  Mark W. Breneman
  -Cold Fusion Developer
  -Network Administrator
    Vivid Media
    [EMAIL PROTECTED]
    www.vividmedia.com
    608.270.9770

    _

  From: Tony Weeg [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, May 05, 2004 10:52 AM
  To: CF-Talk
  Subject: downloading .exe from website

  hi there.

  its been a while since I had to rebuild an iis/cfmx server...

  whats the thing I have to do to make it so that .exe files are downloadable
  from my server?

  or is there nothing, and I just need to work on some other problem here?

  thanks.x

  ...tony

  tony weeg
  senior web applications architect
  navtrak, inc.
  www.navtrak.net
  [EMAIL PROTECTED]
  410.548.2337

    _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Tony Weeg
its iis 5.0

and for the life of me I cant figure out why this focker isnt working???

hmmm...

let me know if you all think of anything else.

thanks!
tony 

-Original Message-
From: Gaulin, Mark [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 12:45 PM
To: CF-Talk
Subject: RE: downloading .exe from website

If we're talking about IIS 6.0 then you need to explicitly add a MIME entry
for the file extension. This is a new security feature of IIS 6.0.

 
    Mark

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 12:28 PM
To: CF-Talk
Subject: RE: downloading .exe from website

> its actually not even in the list?

I'm sure it is somewhere. Within the IIS management console, check the ISAPI
extensions for the virtual directory, if there is one, then check for the
specific site, then check for the Global Web Site.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Gaulin, Mark
If we're talking about IIS 6.0 then you need to explicitly add a MIME entry
for the file extension. This is a new security feature of IIS 6.0.

 
    Mark

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 12:28 PM
To: CF-Talk
Subject: RE: downloading .exe from website

> its actually not even in the list?

I'm sure it is somewhere. Within the IIS management console, check the ISAPI
extensions for the virtual directory, if there is one, then check for the
specific site, then check for the Global Web Site.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444 
  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Dave Watts
> its actually not even in the list?

I'm sure it is somewhere. Within the IIS management console, check the ISAPI
extensions for the virtual directory, if there is one, then check for the
specific site, then check for the Global Web Site.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Tony Weeg
under isapi filters, there is only 1, Jrun Connector Filter, and its set to
high.

that's it.

tw 

-Original Message-
From: Jochem van Dieten [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 12:17 PM
To: CF-Talk
Subject: RE: downloading .exe from website

Tony Weeg said:
> its actually not even in the list?
>
> what should I map it to?

It shouldn't be mapped at all. Are you sure it is not somewhere in an ISAPI
filter?

Jochem
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Jochem van Dieten
Tony Weeg said:
> its actually not even in the list?
>
> what should I map it to?

It shouldn't be mapped at all. Are you sure it is not somewhere in an
ISAPI filter?

Jochem
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Tony Weeg
its actually not even in the list?

what should I map it to?

asp.dll?
jrun.dll?

thanks!
tony 

-Original Message-
From: Jochem van Dieten [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 12:09 PM
To: CF-Talk
Subject: RE: downloading .exe from website

Tony Weeg said:
>
> and what im getting is a 404 error.  however pdf's from the same dir, 
> are downloading fine.

Undo the changes the IIS Lockdown tool made. IIRC that means removing the
mapping from .exe to some 404.dll.

Jochem
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Dave Watts
> I have scripts only on that dir.
> 
> and what im getting is a 404 error. however pdf's from the 
> same dir, are downloading fine.
> 
> hm?
> 
> its only .exe's and .pdfs in that dir, no cfm templates.

That sounds like the work of IIS Lockdown. Look in your ISAPI extensions for
that site and see if there's one mapping .exe to a 404 error page.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Jochem van Dieten
Tony Weeg said:
>
> and what im getting is a 404 error.  however pdf's from the same
> dir, are downloading fine.

Undo the changes the IIS Lockdown tool made. IIRC that means removing
the mapping from .exe to some 404.dll.

Jochem
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Tony Weeg
I have scripts only on that dir.

and what im getting is a 404 error.  however pdf's from the same dir, are
downloading fine.

hm?

its only .exe's and .pdfs in that dir, no cfm templates.

tw 

-Original Message-
From: Tony Weeg [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 12:02 PM
To: CF-Talk
Subject: RE: downloading .exe from website

we ran iis lockdown, which probably has prevented this?

maybe, ill look @ that dir and see whats up.

thanks!

tony 

-Original Message-
From: Mark W. Breneman [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 12:00 PM
To: CF-Talk
Subject: RE: downloading .exe from website

Hey Tony,

If I recall correctly the Ezest was is to put the .exe in a folder then in
IIS turn off all execute permissions for that folder via the IIS admin tab
"directory"

MB

Mark W. Breneman
-Cold Fusion Developer
-Network Administrator
  Vivid Media
  [EMAIL PROTECTED]
  www.vividmedia.com
  608.270.9770

  _  

From: Tony Weeg [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 10:52 AM
To: CF-Talk
Subject: downloading .exe from website

hi there.

its been a while since I had to rebuild an iis/cfmx server...

whats the thing I have to do to make it so that .exe files are downloadable
from my server?

or is there nothing, and I just need to work on some other problem here?

thanks.x

...tony

tony weeg
senior web applications architect
navtrak, inc.
www.navtrak.net
[EMAIL PROTECTED]
410.548.2337

  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Tony Weeg
we ran iis lockdown, which probably has prevented this?

maybe, ill look @ that dir and see whats up.

thanks!

tony 

-Original Message-
From: Mark W. Breneman [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 12:00 PM
To: CF-Talk
Subject: RE: downloading .exe from website

Hey Tony,

If I recall correctly the Ezest was is to put the .exe in a folder then in
IIS turn off all execute permissions for that folder via the IIS admin tab
"directory"

MB

Mark W. Breneman
-Cold Fusion Developer
-Network Administrator
  Vivid Media
  [EMAIL PROTECTED]
  www.vividmedia.com
  608.270.9770

  _  

From: Tony Weeg [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 05, 2004 10:52 AM
To: CF-Talk
Subject: downloading .exe from website

hi there.

its been a while since I had to rebuild an iis/cfmx server...

whats the thing I have to do to make it so that .exe files are downloadable
from my server?

or is there nothing, and I just need to work on some other problem here?

thanks.x

...tony

tony weeg
senior web applications architect
navtrak, inc.
www.navtrak.net
[EMAIL PROTECTED]
410.548.2337

  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Mark W. Breneman
Hey Tony,

If I recall correctly the Ezest was is to put the .exe in a folder then in
IIS turn off all execute permissions for that folder via the IIS admin tab
"directory"

MB

Mark W. Breneman
-Cold Fusion Developer
-Network Administrator
  Vivid Media
  [EMAIL PROTECTED]
  www.vividmedia.com
  608.270.9770

  _  

From: Tony Weeg [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 10:52 AM
To: CF-Talk
Subject: downloading .exe from website

hi there.

its been a while since I had to rebuild an iis/cfmx server...

whats the thing I have to do to make it so that .exe files are downloadable
from my server?

or is there nothing, and I just need to work on some other problem here?

thanks.x

...tony

tony weeg
senior web applications architect
navtrak, inc.
www.navtrak.net
[EMAIL PROTECTED]
410.548.2337

  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Ben Forta
Just don't put the EXE files in an executable folder (which folders
containing .CFM files likely are) as IIS may try to execute them files
instead of serving them.

 
--- Ben

  _  

From: Tony Weeg [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 11:52 AM
To: CF-Talk
Subject: downloading .exe from website

hi there.

its been a while since I had to rebuild an iis/cfmx server...

whats the thing I have to do to make it so that .exe files are downloadable
from my server?

or is there nothing, and I just need to work on some other problem here?

thanks.x

...tony

tony weeg
senior web applications architect
navtrak, inc.
www.navtrak.net
[EMAIL PROTECTED]
410.548.2337 
  _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: downloading .exe from website

2004-05-05 Thread Dave Watts
> whats the thing I have to do to make it so that .exe files 
> are downloadable from my server?

You simply have to ensure that the directory in which you place these exe
files doesn't allow execution of them. You can do this within the IIS
management console - for that directory, make sure that you don't have
"Scripts and Executables" allowed within the Execution field (you can have
"Scripts only" or "None" chosen).

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: downloading .exe from website

2004-05-05 Thread Jochem van Dieten
Tony Weeg said:
>
> whats the thing I have to do to make it so that .exe files are
> downloadable from my server?
>
> or is there nothing, and I just need to work on some other problem
> here?

It should work by default, but can be disabled by the IIS Lockdown tool.

Jochem
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




downloading .exe from website

2004-05-05 Thread Tony Weeg
hi there.

its been a while since I had to rebuild an iis/cfmx server...

whats the thing I have to do to make it so that .exe files are downloadable
from my server?

or is there nothing, and I just need to work on some other problem here?

thanks.x

...tony

tony weeg
senior web applications architect
navtrak, inc.
www.navtrak.net
[EMAIL PROTECTED]
410.548.2337
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]