Package Server 404 error when requesting packages containing .resources, .config or files within a bin folder

Article:TECH194716  |  Created: 2012-08-10  |  Updated: 2012-08-10  |  Article URL http://www.symantec.com/docs/TECH194716
Article Type
Technical Solution


Environment

Problem



If packages (including DeployAnywhere DriversDB) which contain files with the extensions ".resources" and/or ".config" or hidden segments like "bin" folders, the Package Server will return a 404 error instead of allowing the download from the SMP Server.


Error



HTTP Error 404.7 - Not Found

The request filtering module is configured to deny the file extension.







Environment



ITMS 7.1 SP2, including Deployment Solution 7.1


Cause



Microsoft IIS Request Filtering defaults deny the following extensions. This is a security feature in IIS.

<fileExtensions allowUnlisted="true" applyToWebDAV="true">
                    <add fileExtension=".asa" allowed="false" />
                    <add fileExtension=".asax" allowed="false" />
                    <add fileExtension=".ascx" allowed="false" />
                    <add fileExtension=".master" allowed="false" />
                    <add fileExtension=".skin" allowed="false" />
                    <add fileExtension=".browser" allowed="false" />
                    <add fileExtension=".sitemap" allowed="false" />
                    <add fileExtension=".config" allowed="false" />
                    <add fileExtension=".cs" allowed="false" />
                    <add fileExtension=".csproj" allowed="false" />
                    <add fileExtension=".vb" allowed="false" />
                    <add fileExtension=".vbproj" allowed="false" />
                    <add fileExtension=".webinfo" allowed="false" />
                    <add fileExtension=".licx" allowed="false" />
                    <add fileExtension=".resx" allowed="false" />
                    <add fileExtension=".resources" allowed="false" />
                    <add fileExtension=".mdb" allowed="false" />
                    <add fileExtension=".vjsproj" allowed="false" />
                    <add fileExtension=".java" allowed="false" />
                    <add fileExtension=".jsl" allowed="false" />
                    <add fileExtension=".ldb" allowed="false" />
                    <add fileExtension=".dsdgm" allowed="false" />
                    <add fileExtension=".ssdgm" allowed="false" />
                    <add fileExtension=".lsad" allowed="false" />
                    <add fileExtension=".ssmap" allowed="false" />
                    <add fileExtension=".cd" allowed="false" />
                    <add fileExtension=".dsprototype" allowed="false" />
                    <add fileExtension=".lsaprototype" allowed="false" />
                    <add fileExtension=".sdm" allowed="false" />
                    <add fileExtension=".sdmDocument" allowed="false" />
                    <add fileExtension=".mdf" allowed="false" />
                    <add fileExtension=".ldf" allowed="false" />
                    <add fileExtension=".ad" allowed="false" />
                    <add fileExtension=".dd" allowed="false" />
                    <add fileExtension=".ldd" allowed="false" />
                    <add fileExtension=".sd" allowed="false" />
                    <add fileExtension=".adprototype" allowed="false" />
                    <add fileExtension=".lddprototype" allowed="false" />
                    <add fileExtension=".exclude" allowed="false" />
                    <add fileExtension=".refresh" allowed="false" />
                    <add fileExtension=".compiled" allowed="false" />
                    <add fileExtension=".msgx" allowed="false" />
                    <add fileExtension=".vsdisco" allowed="false" />
                </fileExtensions>


Solution



1. In the Microsoft IIS open the SERVERNAME\Sites\Default Web Site\Altiris\PackageShare Feature View.

2. Select request filtering.

3. Choose the file extensions that you want to allow and remove the filters. You can add an "Allow" filter only after removing the "Deny" filter.




Article URL http://www.symantec.com/docs/TECH194716


Terms of use for this information are found in Legal Notices