Cutting off access to non html and asp files on webserver

[Webrookie]

I have NT 4.0 with IIS optionpack 4 on it.&nbsp;&nbsp;I have a website running on it with ASP, HTML, and some JavaScript.<br><br>I have some Access 2000 databases that I'm hitting for messageboards and guestbooks.&nbsp;&nbsp;My problem is if someone knows the name of a file on my server, such as a .mdb file, or any other, they can simply type in the url/#filename# and download the file.&nbsp;&nbsp;<br><br>I would like to prevent this.&nbsp;&nbsp;Anyone know how?

 

[blurred]

just move your database to a directory that is not accessible. ex: if your server root is on c:\inetpub\

http://wwwroot<br>put

your database in c:\inetpub\database<br>no one can access it, bcoz <A HREF="

http://yourservername.com/"

TARGET="_new">

http://yourservername.com/</A>

is your c:\inetpub\

http://wwwroot