Home All Groups Group Topic Archive Search About

IIS6 to block someone from sharing files

Author
28 Mar 2005 7:58 PM
Backup
I am looking for a way, perhaps with ISAPI filters, in IIS6 to block someone
from sharing files / "porn" pic's under their website.  I have users with
their www.domainname.com and they are hosting pics and files under their
account.  There isn't one link of the website at all pointing to these pics
and I would like to make it so that someone can't just type
http://www.domainname.com/naked19teen.jpg and view photos.



This has become a problem and I am looking to block this.

Author
28 Mar 2005 8:58 PM
Leon Mayne [MVP]
Backup wrote:
> I am looking for a way, perhaps with ISAPI filters, in IIS6 to block
> someone from sharing files / "porn" pic's under their website.  I
> have users with their www.domainname.com and they are hosting pics
> and files under their account.  There isn't one link of the website
> at all pointing to these pics and I would like to make it so that
> someone can't just type http://www.domainname.com/naked19teen.jpg and
> view photos.

Wouldn't it just be better to just get them to delete the pictures from
their site or cancel their account? Presumably you have something in your
t&c of use to stop people hosting offensive material?

If not then there might be a way to reject requests to non-html files (e.g.
jpg & gif) if the request does not have a referer. Not sure how or if it
would work.
Author
29 Mar 2005 5:16 AM
Jason Brown [MSFT]
There's a third part ISAPI filter called LeechBlocker that can do this
pretty well.

http://www.michaelbrumm.com/leechblocker.html


--
Jason Brown
Microsoft GTSC, IIS

This posting is provided "AS IS" with no warranties, and confers no rights.


Show quote
"Leon Mayne [MVP]" <l.rmvma***@uea.ac.uk> wrote in message
news:OUEaoj9MFHA.1028@TK2MSFTNGP10.phx.gbl...
> Backup wrote:
>> I am looking for a way, perhaps with ISAPI filters, in IIS6 to block
>> someone from sharing files / "porn" pic's under their website.  I
>> have users with their www.domainname.com and they are hosting pics
>> and files under their account.  There isn't one link of the website
>> at all pointing to these pics and I would like to make it so that
>> someone can't just type http://www.domainname.com/naked19teen.jpg and
>> view photos.
>
> Wouldn't it just be better to just get them to delete the pictures from
> their site or cancel their account? Presumably you have something in your
> t&c of use to stop people hosting offensive material?
>
> If not then there might be a way to reject requests to non-html files
> (e.g. jpg & gif) if the request does not have a referer. Not sure how or
> if it would work.
>
Author
29 Mar 2005 4:11 PM
Backup
I looked into that ISAPI filter called Leech Blocker.  It doesn't say how
to implement it.

I did what I thought was setting it up but I still allowed me to gain access
to sub paths and pull image files.



My Example of sub paths are this:  when a web site is: www.domain.com  but
someone is hosting photos in a path called
/hidden/hope_the/admin/doesnt/see/this/.  There are no links for the site,
so what the use is doing is pulling images (Steeling) them from the
www.domain.com site and posting it on www.theirsite.com
Author
29 Mar 2005 7:45 PM
David Wang [Msft]
It sounds like you did not set up the ISAPI Filter correctly.  Please give
the instructions that you followed - exactly.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Backup" <bac***@yahoo.com> wrote in message
news:O%23lmZnHNFHA.1476@TK2MSFTNGP09.phx.gbl...
I looked into that ISAPI filter called Leech Blocker.  It doesn't say how
to implement it.

I did what I thought was setting it up but I still allowed me to gain access
to sub paths and pull image files.



My Example of sub paths are this:  when a web site is: www.domain.com  but
someone is hosting photos in a path called
/hidden/hope_the/admin/doesnt/see/this/.  There are no links for the site,
so what the use is doing is pulling images (Steeling) them from the
www.domain.com site and posting it on www.theirsite.com
Author
29 Mar 2005 1:11 PM
Kristofer Gafvert
Hi,

This is somewhat difficult, because what is a "porn" pic? A computer
cannot (today) look at a picture, and tell if it is a "good" picture, or a
"bad" picture.

I think that the best solution is given by Leon; deny users to have these
kind of material on their website, or else they can have their account
canceled.

An ISAPI filter can block serving of files based on many different
criterias (host header, file name, etc.). But again, there is no way to
remove everything (unless you block all pictures, but that is probably not
an option). Sooner or later, these people will find a way to have their
pictures being served by the webserver.


--
Regards,
Kristofer Gafvert
www.gafvert.info - My Articles and help
www.ilopia.com


Backup wrote:

Show quote
> I am looking for a way, perhaps with ISAPI filters, in IIS6 to block
someone
> from sharing files / "porn" pic's under their website.  I have users with
> their www.domainname.com and they are hosting pics and files under their
> account.  There isn't one link of the website at all pointing to these
pics
> and I would like to make it so that someone can't just type
> http://www.domainname.com/naked19teen.jpg and view photos.
>
>
>
> This has become a problem and I am looking to block this.

AddThis Social Bookmark Button