ed124
asked on
IIS lockdown and uploads
I was doing some work on an older windows 2000 IIS 5 server, and noticed that IIS lockdown had never been run on it. So I ran IIS lockdown, and the sites on that server seem to be running OK, except for uploading.
The problem seems to be file size. Uploading a 10k file works OK, but trying to upload a 150k file seems to drop the connection. Un-doing the lockdown, the upload works fine.
During the lockdown, I deselected the option to restrict anonymous users for writing to content directories, so thats not the problem. I also did not install URLscan, so thats not the problem either.
The site uses AspSmartUpload for the uploading. There are no server errors, just the connection or network error. Nothing in the event logs either. It seems like IIS lockdown limited the content length allowed in the request, but I didnt think it was supposed to do that.
Ive searched this problem everywhere, but I only find this issue occurring with URLScan installed, but like I said, I did not install it. So any help would be appreciated.
The problem seems to be file size. Uploading a 10k file works OK, but trying to upload a 150k file seems to drop the connection. Un-doing the lockdown, the upload works fine.
During the lockdown, I deselected the option to restrict anonymous users for writing to content directories, so thats not the problem. I also did not install URLscan, so thats not the problem either.
The site uses AspSmartUpload for the uploading. There are no server errors, just the connection or network error. Nothing in the event logs either. It seems like IIS lockdown limited the content length allowed in the request, but I didnt think it was supposed to do that.
Ive searched this problem everywhere, but I only find this issue occurring with URLScan installed, but like I said, I did not install it. So any help would be appreciated.
ASKER
Thanks QPR, but this is IIS 5. I did however check that variable via Metabase editor, and it was set to 1 gig. So that doesnt look like the issue.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes, that's the default for IIS 5
Right click the web server and check the enable direct metabase edit option.
Now open the %Windows dir%\System 32\Inetsrv\MetaBase.xml file.
Change the AspMaxRequestEntityAllowed
http://www.dotnetjunkies.com/WebLog/jonne_kats/default.aspx
This is what I have had to do in the past, maybe it's the same issue you are having?