Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to ignore HTTP 1.0 requests in IIS (7.0)? I don't see any reason to accept requests that are not HTTP 1.1.

share|improve this question

migrated from May 22 '12 at 9:25

This question came from our site for computer enthusiasts and power users.

I see even less reason to reject HTTP/1.0. It hasn't been marked "obsolete" yet, it's still in use by simpler (non-browser) HTTP clients, and is probably even handled by the same code as HTTP/1.1 (which was explicitly designed to remain compatible with 1.0). It would be just additional work with absolutely no gain. – grawity May 11 '12 at 16:46
Additionally, see Is HTTP/1.0 still in use? from stackoverflow – Sašo May 22 '12 at 9:27
@mikemaccana: No, that's a reason to reject clients which don't send the Host header. That's not a reason to reject HTTP 1.0 clients, most of which do send Host. – grawity Jan 14 '15 at 10:53
@grawity: You're right, I misread the RFC. It says to reject clients that identify as HTTP 1.1 but that don't send Host. – mikemaccana Jan 14 '15 at 11:15
up vote 1 down vote accepted

Step 1: download and install URL Rewrite.
Step 2: add the following to your web.config file, to the <system.webServer> section:

        <rule name="RequestBlockingRule1" patternSyntax="Wildcard" stopProcessing="true">
            <match url="*" />
                <add input="{SERVER_PROTOCOL}" pattern="HTTP/1.0" />
            <action type="AbortRequest" />

This will refuse all HTTP 1.0 requests with a HTTP 504 error code.

Edit: after installing URL Rewrite, you can also configure rewrite rules in IIS Manager:

enter image description here

share|improve this answer
This works perfectly! I tested using curl -v -0 http://localhost and it does indeed respond with an abort. – Mark Richman May 11 '12 at 21:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.