- Problem Domain
- .NET Hook to HTTP Pipe
- Implementing the IHttpModule Interface
- Building and Configuring IHttpModule
- Quick Testing of Deployment
- More Security with StateWall
- Conclusion
Building and Configuring IHttpModule
Here are the steps for compiling and configuring StateWall (refer to Figures 4, 5, and 6):
Figure 4 .NET 2.0 command prompt.>
Figure 5 Compiling with csc.
Figure 6 Generation of StateWall DLL.
To implement on IIS, follow these steps:
- Put StateWall.dll into the /bin/ folder of the root directory of login.example.com.
- Add the following lines to the web.config file (this is required to
load this module):
<httpModules> <add type="StateWall.StateShield, StateWall" name="StateShield" /> </httpModules>
Now that the hook has been turned on, every request hitting ASP.NET resources such as .aspx or .asmx will be processed. StateWall is up and running for session-based decision-making at the gates of the Web application.
The directory struture on the Web application root appears as shown in Figure 7.
Figure 7 Directory structure on the Web application root.