Results 1 to 4 of 4

Thread: IIS instead of girder webserver or want to avoid directory listing

  1. #1
    Join Date
    Sep 2008
    Posts
    150

    Default IIS instead of girder webserver or want to avoid directory listing

    By default it appears that if you access the girder webserver without the index.html default (I decided to make it more difficult for a none authorised person to access my web server by using a different default file name), then you get a directory listing, effectivelly opening up the folder and file structure for attack.

    i.e, say my web server was on http://123.456.789.123/mynewindex.html
    if I only typed in: http://123.456.789.123 I would be presented with the directory listing where I can open any file!

    I can't find a way to disable this with the girder web server.
    I have set up IIS in my windows 7 professional machine, but I can't get it to send ajax calls to or receive data from girder.
    Given this configuration page:
    Click image for larger version. 

Name:	IIS.JPG 
Views:	115 
Size:	78.6 KB 
ID:	6758
    What do I click on to get this to work?

    I note this previous post which implies this should work:
    http://www.promixis.com/forums/showt...-Girder-Server

    But for the life of me I can't work out how to get this to work.
    With thanks
    Jon

  2. #2
    Join Date
    Jul 2007
    Location
    Netherlands
    Posts
    370

    Default

    not a technical answer, nor something you might be interested in, but; security through obscurity is a bad concept. Secure the site, use a password.
    Using: Win7 MCE, Girder, xPL, RFXcom, HomeEasy

    http://www.thijsschreijer.nl

  3. #3
    Join Date
    Sep 2008
    Posts
    150

    Default

    I appreciate the reply
    I have a password set for the site as well.
    I just thought layers of security was an even better concept. This is just one of many others.
    Unfortunately, this 'layer' makes things worse.
    I guess a dummy index.html may be an intermediate option.
    I would still be interested in setting up IIS for Girder webserver for interest.
    I have another need to have two routes in to my server. Once for access to and to interact with Girder data via a password, and another to one file only not password protected for an external datalogger to send URL data to the web server. So I need to set up two accounts. I can't get the girder web server (although the manual implies this is possible) to do this.
    With thanks
    Jon

  4. #4
    Join Date
    May 2005
    Location
    Nuremberg - Germany
    Posts
    28

    Default

    Maybe reverse proxy with ARR and Rewrite Url would help?
    http://www.iis.net/learn/extensions/...equest-routing

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •