Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Error 404 on /bin browsing

I run IIS 7.5 on Windows Server 2008 R2.
I'm getting a 404: file not found error when I browse the "/bin" folder. I understand that this is a security policy by Microsoft.

I tried doing what is written in here but it didn't solve the issue. Any ideas?

EDIT:
Should be noted that I have no security issues. I run the IIS for direcotry browsing in a private network. Eventually I need to perform crawling and indexing on it. The problem is that pages under "/bin" and '/AppConfig" are not being crawled because of the 404 error.

I just need a solution for this issue. Again, no security issues are relevant here.

like image 582
user1251654 Avatar asked Jul 04 '12 07:07

user1251654


1 Answers

Bin folder is not intended as a place where a developer should put web pages.

In IIS 7.5 you can configure

  1. Open Internet Information Services (IIS) Manager
  2. In the Connections pane, go to the connection, site, application, or directory for which you want to modify your request filtering settings.
  3. In the Home pane, double-click Request Filtering.
  4. In the Request Filtering pane, click the Hidden Segments tab
  5. Select the relative path that you want to show (BIN folder), and then click Remove in the Actions pane.

The same can be done via web.config

<configuration>
  <system.webServer>
   <security>
     <requestFiltering>
        <hiddenSegments applyToWebDAV="false">
           <remove segment="Bin" />
        </hiddenSegments>
     </requestFiltering>
   </security>
  </system.webServer>
</configuration>

Anyway, in orded to avoid problems on development server and on any deploy server, i think that the easiest solution is to move that pages to another folder.


Read here:

ASP.NET recognizes certain folder names that you can use   
for specific types of content.  
The following table lists the reserved folder names and the type   
of files that the folders typically contain.

Note
The content of application folders, except for the App_Themes folder,
is not served in response to Web requests,
but it can be accessed from application code.
  • App_Browsers Contains browser definitions (.browser files) that ASP.NET uses to identify individual browsers and determine their capabilities.
  • App_Code Contains source code for shared classes and business objects
  • App_Data Contains application data files including .mdf database files, XML files, and other data store files.
  • App_GlobalResources Contains resources (.resx and .resources files) that are compiled into assemblies with global scope.
  • App_LocalResources Contains resources (.resx and .resources files) that are associated with a specific page, user control, or master page in an application
  • App_Themes Contains a collection of files (.skin and .css files, as well as image files and generic resources) that define the appearance of ASP.NET Web pages and controls.
  • App_WebReferences Contains reference contract files (.wsdl files), schemas (.xsd files), and discovery document files (.disco and .discomap files) that let you create a Web reference for use in an application.
  • Bin Contains compiled assemblies (.dll files) for controls, components, or other code that you want to reference in your application.
like image 193
Emanuele Greco Avatar answered Sep 20 '22 06:09

Emanuele Greco