How to avoid upload of some file extensions in one eB Web Server but allow that file extensions in another eB Web Server?

Hello Gintautas,

We found that by using a DB Event we can identify from the session from wich web server the user is trying to upload the file and block It.  Could you just give us some feedback about this approach?

Hi Sebastian,

Has this issued been resolved?

Hi Carma, no, It would be great if someone could send us some feedback about the proposed approach.  We can create the DB Event, we just want know whether is a good idea or not.

Thanks a lot,

Sebastian.

Let me look into this and get back to you.

Hi Sabastian,

Apologies for the delay, I gues you might be able to do some configuration as IIS level, ignoring eB configurational change. Otherwise you would have to maintain one additional configuration from eB Server side.
Also, I would suggest to use IIS else take help from Bentley Professional Services team configure one for you as it easier that way.
If you want to check eB server side by yourself, please check the onobjectadded event where object type is file and check the source of the session with DMZ or LAN.

Hi Sabastian,

Apologies for the delay, I gues you might be able to do some configuration as IIS level, ignoring eB configurational change. Otherwise you would have to maintain one additional configuration from eB Server side.
Also, I would suggest to use IIS else take help from Bentley Professional Services team configure one for you as it easier that way.
If you want to check eB server side by yourself, please check the onobjectadded event where object type is file and check the source of the session with DMZ or LAN.

Hi Manav,

The big problem with a configuration at IIS level is that eB sends the file from the client box to the web server in chunks.  In fact, those chunks are then locally saved temporally in the system temp directory of the web server.  So in fact, IIS is not aware of what type of file is been uploaded.  We can't block the file type through It's MIME Type.

https://communities.bentley.com/products/assetwise/assetwise_platform/w/wiki/9496/troubleshooting-file-upload-issues

Do you have any idea in order to point us in the correct way to accomplish this by changing some configuration at IIS level?

The DB Event options works exactly as you have explained, we have tested It.

Thanks in advance, kind regards,

Sebastian.

I was doing a quick search on IIS on internet that shows that you can restrict mime types for files served by IIS, what I don't know yet is if you can do it for files uploaded. 
Using eb solution as event handler is going to be better for sure but need extra maintenance as it is configurational change on server for both DMZ and LAN.
There is no problem using DB event just precaution and I would say expert help (Bentley consultants) who worked on customization and creating events would be easy.