I'm not sure how this is possible, but when using AjaxFileUpload you are still able to somehow upload extremely large files even when you have set both maxRequestLength and maxAllowedContentLength properties in the web.config.
In my case I would like to set a limit on uploaded file size to 30 MB. So I have set both the maxRequestLength and maxAllowedContentLength properties to their 30MB equivalents (as seen below). I'm running IIS 7.5 on Server 2008 R2. Somehow, when using the AjaxFileUpload control I can still upload files over 400 MB.
When using the normal out of the box asp FileUpload control, the maxRequestLength and maxAllowedContentLength settings are limiting the file size appropriately. So the properties in the web.config are correct.
Help...What am I missing?
```
<configuration>
<system.web>
..........
<httpRuntime maxRequestLength="30720"/> <!--30 MB in kilobytes-->
..........
</system.web>
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
<handlers>
<add name="AjaxFileUploadHandler" verb="*" path="AjaxFileUploadHandler.axd" type="AjaxControlToolkit.AjaxFileUploadHandler, AjaxControlToolkit"/>
</handlers>
<security>
<requestFiltering>
<requestLimits maxAllowedContentLength="31457280" /> <!-- 30 MB in bytes-->
</requestFiltering>
</security>
</system.webServer>
..........
</configuration>
```