Home / server / Questions / 95060
Accepted
Jakub
Asked: 2009-12-17 10:35:37 +0800 CST

Disallowing access to certain file type in IIS6

  • 772

I can do this just fine under Apache with htaccess / permissions. But at work its all M$ all the time...

I need to lock off access to any .fla files that might come up. We keep them next to the few .swf we use on some of our sites, I just want to be sure they are not being served.

Thanks!

EDIT

I should point out that I didn't think I needed to mention what code is running on this particular site, but it seems that I have to, as I have ASP classic code, which will not allow me to read a web.config file, it will just ignore it.

EDIT... EDIT

Really... nobody knows how I can do this?

security

2 Answers

  1. Best Answer

    I believe you need to create a handler, and map it to the System.Web.HttpForbiddenHandler in the web.config.

    e.g. MDB files aren't served up by default:

    <add path="*.mdb" verb="*" type="System.Web.HttpForbiddenHandler" validate="true"/>

    edit: I think you may also need to add it as a MIME type as described in Home Boy's post.

    • 1

  2. Check the MIME extensions, Im hoping .fla is not one of those default supported content types.

    • 0