We have the following situation: Two eB Web Servers: 1 in the DMZ | 1 in the LAN
From Director we can remove a Media Type, let's say .ppt.pptx
This prevent uploading those file types to eB from all the clients: Director, Web Server LAN and Web Server DMZ.
The customer wants to prevent upload of all file types except: .docx.xlsx.pdf.dwg ONLY from Web Server in the DMZ.
How can we accomplish that? Any idea?
Thanks in advance,
We found that by using a DB Event we can identify from the session from wich web server the user is trying to upload the file and block It. Could you just give us some feedback about this approach?
Hi Carma, no, It would be great if someone could send us some feedback about the proposed approach. We can create the DB Event, we just want know whether is a good idea or not.
Thanks a lot,
Let me look into this and get back to you.
Apologies for the delay, I gues you might be able to do some configuration as IIS level, ignoring eB configurational change. Otherwise you would have to maintain one additional configuration from eB Server side. Also, I would suggest to use IIS else take help from Bentley Professional Services team configure one for you as it easier that way.If you want to check eB server side by yourself, please check the onobjectadded event where object type is file and check the source of the session with DMZ or LAN.
Answer Verified By: Sebastian Fernandez Pacheco
The big problem with a configuration at IIS level is that eB sends the file from the client box to the web server in chunks. In fact, those chunks are then locally saved temporally in the system temp directory of the web server. So in fact, IIS is not aware of what type of file is been uploaded. We can't block the file type through It's MIME Type.
Do you have any idea in order to point us in the correct way to accomplish this by changing some configuration at IIS level?
The DB Event options works exactly as you have explained, we have tested It.
Thanks in advance, kind regards,
I was doing a quick search on IIS on internet that shows that you can restrict mime types for files served by IIS, what I don't know yet is if you can do it for files uploaded. Using eb solution as event handler is going to be better for sure but need extra maintenance as it is configurational change on server for both DMZ and LAN.There is no problem using DB event just precaution and I would say expert help (Bentley consultants) who worked on customization and creating events would be easy.