0
votes
0answers
7 views

URLScan not starting

I am trying to run URLScan for IIS 7.5, but the utility will not load on one server. It runs on another server with the same configuration file. Checking "tasklist /m url*" at the command line does ...
1
vote
1answer
198 views

IIS Request Filtering Rule for User Agent

I'm trying to block requests from a certain bot. I've added a request filtering rule, but I know it is still hitting the site because it shows up in Google Analytics. Here is the filtering rule I ...
0
votes
0answers
48 views

Request filtering by verb and segments or url (IIS 7.5)

How can I filter POST requests to the specified URL? example.com/id123456789 where the permanent part is example.com/id example.com/id123456789/smth where the permanent part is ...
2
votes
1answer
448 views

Windows Server 2008 r2 IIS: can't allow access to file extension in request filtering

I have a Windows Server 2008 r2 installation with configured FTP and IIS. If I upload through FTP two files: "test.txt" and "test.abc" and then try to access these files through HTTP, then I can ...
1
vote
2answers
2k views

What file extensions must be allowed in request filtering when using ASP.Net MVC 3?

I have request filtering enabled and "Allow unlisted file name extensions" is set to false. When requesting any normal path, including "http://localhost" I get a 404.7 error - "The request filtering ...
1
vote
0answers
275 views

IIS 7.5 Request Filtering - best practice rules?

Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default. Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only ...
0
votes
1answer
282 views

Block certain filetypes and values found in the url in IIS

I have someone who is not supposed to be scanning my site attempting to exploit some php vulnerabilities. I have started blocknig their IP's but more than one person is doing it, and each request ...