IIS6.0 Enable HttpCompression for specific extensions at site level - iis

I want to enable HttpCompression in IIS6.0 using adsutil.vbs. I understand that i can enable it for generic server level as well as for a specific website under IIS. (I used this http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/502ef631-3695-4616-b268-cbe7cf1351ce.mspx?mfr=true as a primary resource)..
However my question is different. I want to specify the extensions (asmx to be precize) to be compressed. That's perfectly doable at the webserver level but somehow I am not able to understand, how can i set it up at the site level . This is required because, in a deployment scneario, there could be multiple web apps hosted under same IIS and client is not interested in turning on compression on asmx other than my app.
Can someone help?

While researching further, I came across this resource which has explained about enabling the compression at site level.
In a nut shell here are the steps
Open Internet Information Services (IIS) Manager:
In the Connections pane, go to the connection, site, application, or directory for which you want to enable compression.
In the Home pane, double-click Compression.
In the Compression pane, check the boxes to enable static or dynamic compression, or remove the check marks to disable static or dynamic compression.
Once you have completed the above steps, click Apply in the Actions pane.

Related

How to change Chromium configs through extension

I need some advice about Chromium extension possibilities. Can the extension change configs of the browser such as: home page, default behavior for protocol handlers (tel, mailto), security settings ("protect from dangerous websites" for example), disable sending statistics to Google, etc.?
Which configs from chrome://settings/ can be changed and how to do it if it's possible?
The Chrome API index is a good place to start.
From it, you can glean the following capabilities:
accessibilityFeatures API that deals with accessibility settings.
browsingData API that deals with clearing browsing data.
contentSettings API that deals with allowed content, site permissions and plugins.
downloads API can at least partially influence download settings.
fontSettings API can manage fonts used by Chrome.
management API can manage (but not install) other extensions.
privacy API deals with privacy-related settings (that includes some security settings).
proxy API can manage proxy settings.
In addition, there's a lot of Chrome OS specific APIs I won't list here.
There are also some manifest keys that can influence Chrome settings on install - such as the home page. See chrome_settings_overrides (note: not available on Linux) and to a lesser extent Override Pages.
See also Protecting user settings on Windows with the new Settings API (which announced the above).
Other than those, no, you can't override Chrome settings. You cannot dynamically change the home or search provider, you can't control protocol handlers (that's on OS level anyway), etc.
Note that you can't inject scripts into chrome://* pages, so you won't be able to just fiddle with the UI.

Serving file:// files to users

Currently I'm building a local serach engine for network drives that is going to be used in our company.
The search engine is build on top of Solr and Tika. I've build an indexer that indexes Samba-shares over the network which works great and indexes all the directories that are given in a configuration file. However that is not really relevant.
The current problem we have is that the web interface that connects to Solr and delivers the search results will try to serve local file:// files that are links to the files with a absolute or Samba path. But serving file://'s are of course disallowed by browsers like Google Chrome. The error that Chrome gives is:
Not allowed to load local resource: file:///name/to/file.pdf
Which is obvious and logical, however I want to work around that issue and serve 'local' files to our users. Or at least open an Explorer window with the given path.
I was wondering if this is even possible or if there is a workaround available? The server that is going to serve these files is running on Apache or Tomcat (doesn't matter).
Alhtough opening file://'s seems pretty much impossible without the use of browser-specific plugins, I created a workaround by specifying a custom URI-handler combined with a Windows specific application that will open explorer.exe with the given directory.
This is by far not the ideal answer to my question, but I think it is a decent workaround for an intranet search application.
Streaming the file from your application to the browser is a much better idea from a usability and security perspective.
By assigning a MIME type to the stream, the user's browser can decide how best to open and display the file to the user.
By streaming from you application, control of the data can be maintained. The location of the file on you server is not revealed and proper authentication, authorization and auditing are easily achieved.
Assuming Java based upon your use of Solr and Tika:
http://www.java-forums.org/blogs/servlet/668-how-write-servlet-sends-file-user-download.html

SiteMinder on IIS7.5 Authentication on app by app basis?

I inherited a mess of servers which host multiple applications on IIS6, protected by R6 SiteMinder. The environment is soon going to R12, and we have also received some new servers with IIS7.5. (Lots of change, all within the next 60days.)
I am not an expert, and so am having trouble with some of the more detailed steps of configuration. Thus far, on the new server I am able to create and apply SiteMinder to the DefaultWebSite (and everything contained within), and any custom Sites that I create. Unfortunately in our environment, it is already set up with a handful of applications that live underneath DefaultWebSite, only some of which we desire SiteMinder protection.
In IIS6 I was able to simply add a site to SiteMinder authentication by applying the ISAPI6WebAgent.dll in the wildcard mappings. In IIS7.5, this does not seem to work. I follow the specific details in the installation manual and it seems like it is either an all-or-nothing situation: everything under DefaultWebSite is protected, or nothing is.
This will cause a SIGNIFICANT amount of additional work in my environment (and it also means upgrading in place is not possible, so all applications that require SiteMinder authentication will need to be migrated in the next 60 days.) Is there ANY workaround for this? Google has not provided me with any solutions, and my SiteMinder team is claiming "it is no longer possible with IIS7.5" to keep the environment the way it is currently set up.
Any and all help appreciated.
For those that care, if you are running under an Integrated App Pool, you can simply add and remove the SiteMinder modules to control which sites are protected by SiteMinder. This DOES work on apps below a virtual directory - and using the config files you can both inherit protection by default, or have it unprotected and add it later by simply "Configure Native Module" and adding it back.

IIS: Add Feature

I need to edit IP rules using the IP Address and Domain Restrictions feature in IIS 7.0, but on my Windows 7 machine this feature is not present in my IIS. Does anybody know how to go about adding this feature to IIS? I can't find a download anywhere...or a section in IIS to add features. Thanks :)
It may be a restriction of IIS on the client. Closest I could find was the Dynamic IP Module. I don't see that module on the web anywhere either.
HOWEVER:
You probably just don't have the feature enabled:
Open the Control Panel
Search for Programs and Features
Select Turn Windows Features on or off
Expand the IIS node
Check out the security section, I think it falls under IP Security, either way it doesn't hurt to turn it all on, especially for a dev. environment.

No Mime Types Option in IIS 7

I have a problem in IIS whereby I have installed a web applcation that runs using .NET but when you navigate to it none of the images are displayed and the CSS is not being used, so the page is completely unformatted.
I am stumped by this but I was wondering if it could be something to do with permitted MIME types, so was going to check which ones were permitted when i noticed tghat the MIME types option is not present.
I can see it in IIS on another server in the IIS section when you click on a site, but it is just not present on this server. Does anyone know:
a) Why it is not there and how you can get it back
b) If it could be the cause of the problem whereby the CSS is not detected and no images are shown?
I hope that I've explained this properly but will be happy to provide any more information to anyone that is happy to help!! :-)
Thanks
To solve the missing (blank CSS) and image issue, you need to install the Static Content Role.
Start -> Administrative Tools -> Server Manager
Select Web Server under Roles
Third option down is Static Content under Common Http Features
Install it
Your static content will now be served.
If you need to add specific MIME types then you can use the newly installed MIME Types feature. The new Role will not be shown until you restart IIS Manager.
This is the answer for non-server users, I have Windows 10 and the comment of Phil (see answer below) worked for me:
"And if you're on a non-server OS like Windows 8, do a search on the
start page for "Turn Windows features on or off" and enable Internet
Information Services -> World Wide Web Services -> Common HTTP
Features -> Static Content"
Feature settings screenshot:
OK, under IIS manager on W2k8 I see MIME Types under "HTTP Features". If you don't see the MIME Types configuration option, then you may need to follow Junto's steps in the answer above to install support for static files in IIS.
See

Resources