RE: Protecting static resources in IIS

2010-11-03 Thread Rob Gregory
Totally agree with Chuck, I would not recommend running a web server as a root/system user. > -Original Message- > From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] > Sent: 02 November 2010 18:48 > To: Tomcat Users List > Subject: RE: Protecting static r

RE: Protecting static resources in IIS

2010-11-02 Thread Richard G Curry
- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Tuesday, November 02, 2010 1:48 PM To: Tomcat Users List Subject: RE: Protecting static resources in IIS > From: Richard G Curry [mailto:rgcu...@jcpenney.com] > Subject: RE: Protecting static resources in IIS > > &

RE: Protecting static resources in IIS

2010-11-02 Thread Caldarale, Charles R
> From: Richard G Curry [mailto:rgcu...@jcpenney.com] > Subject: RE: Protecting static resources in IIS > > > > From: Rob Gregory [mailto:rob.greg...@ibsolutions.com] > > > > Subject: RE: Protecting static resources in IIS > > > > Would that then re

RE: Protecting static resources in IIS

2010-11-02 Thread Richard G Curry
: Tomcat Users List Subject: RE: Protecting static resources in IIS > From: Richard G Curry [mailto:rgcu...@jcpenney.com] > Subject: RE: Protecting static resources in IIS > > From: Rob Gregory [mailto:rob.greg...@ibsolutions.com] > > Subject: RE: Protecting static resources in I

RE: Protecting static resources in IIS

2010-11-02 Thread Caldarale, Charles R
> From: Richard G Curry [mailto:rgcu...@jcpenney.com] > Subject: RE: Protecting static resources in IIS > > From: Rob Gregory [mailto:rob.greg...@ibsolutions.com] > > Subject: RE: Protecting static resources in IIS > > Would that then result in having to run Tomca

RE: Protecting static resources in IIS

2010-11-02 Thread Richard G Curry
: RE: Protecting static resources in IIS Would that then result in having to run Tomcat/Apache/IIS as root/system rather than a restricted user? > -Original Message- > From: Richard G Curry [mailto:rgcu...@jcpenney.com] > Sent: 02 November 2010 17:43 > To: Tomcat Users List &

RE: Protecting static resources in IIS

2010-11-02 Thread Rob Gregory
Would that then result in having to run Tomcat/Apache/IIS as root/system rather than a restricted user? > -Original Message- > From: Richard G Curry [mailto:rgcu...@jcpenney.com] > Sent: 02 November 2010 17:43 > To: Tomcat Users List > Subject: RE: Protecting static r

RE: Protecting static resources in IIS

2010-11-02 Thread Richard G Curry
o my Pager: 9725857...@page.metrocall.com -Original Message- From: Pid * [mailto:p...@pidster.com] Sent: Tuesday, November 02, 2010 11:42 AM To: Tomcat Users List Subject: Re: Protecting static resources in IIS On 2 Nov 2010, at 15:48, Siva prakash I V wrote: > Hi Rob, > > My app

Re: Protecting static resources in IIS

2010-11-02 Thread Pid *
#x27;t see why >> you would want to stop access to something when it is actually requested >> otherwise what would be the point of deploying it (if nothing can access >> it). Sorry if I misunderstand the question. >> >> >>> -Original Message- >>

RE: Protecting static resources in IIS

2010-11-02 Thread Rob Gregory
is just as good at serving static content as Apache or IIS is. Regards Rob > -Original Message- > From: Siva prakash I V [mailto:sivaprakash...@gmail.com] > Sent: 02 November 2010 15:48 > To: Tomcat Users List > Subject: Re: Protecting static resources in IIS > >

Re: Protecting static resources in IIS

2010-11-02 Thread Mikolaj Rydzewski
On Tue, 2 Nov 2010 21:18:02 +0530, Siva prakash I V wrote: My app contains a sequence of images like for eg. A/11.gif, A/12.gif, A/19.gif, B/21.gif... etc. These images are used to identify a valid user of my app. As these images are easily guessable, it may be easy for anyone to down

Re: Protecting static resources in IIS

2010-11-02 Thread Siva prakash I V
the point of deploying it (if nothing can access > it). Sorry if I misunderstand the question. > > > > -Original Message- > > From: Siva prakash I V [mailto:sivaprakash...@gmail.com] > > Sent: 02 November 2010 14:44 > > To: Tomcat Users List > > Su

RE: Protecting static resources in IIS

2010-11-02 Thread Rob Gregory
hing can access it). Sorry if I misunderstand the question. > -Original Message- > From: Siva prakash I V [mailto:sivaprakash...@gmail.com] > Sent: 02 November 2010 14:44 > To: Tomcat Users List > Subject: Re: Protecting static resources in IIS > > Firstly, Thanks for

Re: Protecting static resources in IIS

2010-11-02 Thread Siva prakash I V
Firstly, Thanks for the info. I've done what you've said. Consider my directory structure as below in IIS. /images/TestDir/A.gif /images/TestDir/index.html (newly introduced one) If I hit the following url, it shows the index.html https:///images/TestDir/

RE: Protecting static resources in IIS

2010-11-02 Thread Rob Gregory
While this is not a forum nor is the mailing list about IIS a quick suggestion and one we implement is to place a blank (or custom) index.html file into every directory within the site. This will then be served up when requests for resources are received. Hope that helps Rob > -Original Mess