Home All Groups Group Topic Archive Search About

How to protect *.mdb file from direct access by client

Author
5 Sep 2005 11:32 PM
AJang
In windows 2000, we can map file extention ".mdb" to 404.dll (which IIS
lockdown installed) to protect
microscodt access databases from direct access by client.

In Windows 2003 server, the above method do not work. In fact we can't
register 404.dll at all.
In Machine.Config, we add
<add verb="*" path="*.mdb" type="System.Web.HttpForbiddenHandler" />
in <httpHandler> section,it still do not work.

Can some one tell me how to protect *.mdb file ?

Thanks

Author
6 Sep 2005 6:24 AM
Dominick Baier [DevelopMentor]
Hello AJang,

you also habe to make sure to route the request to asp.net. Just replicate
the .aspx entry in the IIS script mappings to .mdb.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote
> In windows 2000, we can map file extention ".mdb" to 404.dll (which
> IIS lockdown installed) to protect microscodt access databases from
> direct access by client.
>
> In Windows 2003 server, the above method do not work. In fact we can't
> register 404.dll at all.
> In Machine.Config, we add
> <add verb="*" path="*.mdb" type="System.Web.HttpForbiddenHandler" />
> in <httpHandler> section,it still do not work.
> Can some one tell me how to protect *.mdb file ?
>
> Thanks
>