<br><font size=2 face="sans-serif"> Actually, IIS does start ColdFusion. ColdFusion installs as a server-side middleware package that uses the ISAPI interface in IIS to do the dynamic processing. The changes you recommended for the browser will only affect how the user's PC interprets what ColdFusion and IIS send.</font>
<br>
<br><font size=2 face="sans-serif"> To address the original question: Assuming, Rangel, that you either (a) exclusively use IIS on this server for CVSWEB, or (b) have the CVSWEB portion of the web site set up in a virtual directory, you can turn ColdFusion off for CVSWEB through the IIS Administrator. Right-click the virtual directory that stores the CVSWEB stuff (or the top-level web site if you use it exclusively for CVSWEB) and choose Properties. Go to the Virtual Directory tab (or the Home Directory tab if you're setting it for the entire site) and click on the Configuration button. The App Mappings tab lists all of the valid file extensions and the ISAPI driver that handles them. To turn off ColdFusion, remove its extensions (.cfm, .cfc, .cfml, .dbd, etc.) from the list.</font>
<br>
<br><font size=2 face="sans-serif"> Incidentally, my recommendation (for all web sites on IIS, not just CVSWEB) is to remove everything that you're not using to mitigate against security vulnerabilities. Also, if you're using the ActiveState implementation of Perl, the default installation uses the Perl ISAPI .dll only for the extension .plx, not .pl. You can change this behavior on this same dialog box by modifying the .pl extension to be the same as .plx, but this will cause any error messages to go to a log file in the Perl\bin directory instead of to the browser, so you have to keep an eye on that log file for production systems.<br>
</font>
<hr><font size=4 face="Times New Roman"><b>Eric A. Laney</b></font><font size=3 face="Times New Roman"><br>
Systems Architect<br>
Verizon Security<br>
</font>
<hr><font size=3 face="Times New Roman">Being natural is simply a pose.</font>
<hr>
<br><font size=2 face="Courier New">Subject: Vedr.: [cvsnt] [OFF] CVSWEB in IIS<br>
To: "Rangel Reale" <rangel-work@bol.com.br>, cvsnt@cvsnt.org<br>
From: jml@nykredit.dk<br>
Date: Thu, 3 Oct 2002 09:12:10 +0200<br>
<br>
<br>
I it's not IIS that starts ColdFusion, but the browser on your workstat=<br>
ion.<br>
If your browser can handle the file type (e.g. .txt, .html, etc.) it wi=<br>
ll<br>
do so, otherwise it will pass the file to the appropriate application.<br>
<br>
Assuming you are running Windows/Internet Exploret, you can change your=<br>
<br>
browsers behaviour by adding a string value "Content Type" =3D "text/h=<br>
tml"<br>
in the registry.<br>
<br>
Create a .reg file with this content:<br>
------------------------------------<br>
REGEDIT4<br>
<br>
[HKEY_CLASSES_ROOT\.cfm]<br>
"Content Type"=3D"text/html"<br>
-----------------------------------<br>
<br>
Duoble click the reg-file and your'e off.<br>
<br>
Regards<br>
<br>
J=F8rgen M=F8ller Larsen - Nykredit Data - Koncernmetode og Arkitektur =<br>
(KMF-V)<br>
- Telefon: +45 9635 5069 - email: jml@nykredit.dk<br>
</font>