This might be a borderline Server Fault-question, but here goes.
I have a IIS 6 where AspMaxRequestEntityAllowed="204800" in MetBase.xml, suggesting the upload file limit is 200kb, while <httpRuntime maxRequestLength="20192"/> in web.config allows for a 20mb upload – and the latter is what the application allows.
Why do web.config override MetaBase.xml? To me, that seems like an error of hirarchy. And where would I find a “centralized parameter” to config max limits for the entire machine the server is on, in case I don’t want some web.config mishapp to allow for gigabytes of upload?
Web.config file is the last-point configuration manager and entries in it will override any entries made in the higher layers.
I.e. any settings made in machine.config file (which are applicable to all websites) will be overridden by web.config (applicable to only that website).
In fact you can have separate web.config file for each folder which will override your root level web.config.
This is the way hierarchy works you know.