Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default.

Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only has File Name Extensions, and Hidden Segments filters.

Thanks in advance, Vindberg

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.