The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
7 views

URLScan not starting

I am trying to run URLScan for IIS 7.5, but the utility will not load on one server. It runs on another server with the same configuration file. Checking "tasklist /m url*" at the command line does ...
1
vote
1answer
198 views

IIS Request Filtering Rule for User Agent

I'm trying to block requests from a certain bot. I've added a request filtering rule, but I know it is still hitting the site because it shows up in Google Analytics. Here is the filtering rule I ...
0
votes
1answer
96 views

Tomcat6 Decompressing GZip Request

Since Tomcat has the option to compress its response to GZip. Is there a way to configure Tomcat 6 to decompress gzipped requests without putting it behind an Apache server with mod_deflate enabled, ...
0
votes
1answer
43 views

Why IIS is still blocking Web.config even after setting denyUrlSequences and fileExtensions?

One of the IIS sites I manage forwards all the requests to Apache. This means that any request, including requests to files such as .config, should be forwarded. <security> ...
0
votes
0answers
48 views

Request filtering by verb and segments or url (IIS 7.5)

How can I filter POST requests to the specified URL? example.com/id123456789 where the permanent part is example.com/id example.com/id123456789/smth where the permanent part is ...
0
votes
0answers
171 views

How to block/filter responses based on content-disposition in IIS 7.5?

I host an application which has a reporting component based on Crystal Reports and I don't have the ability to modify the application or its settings. The reports are normally rendered as HTML but ...
0
votes
1answer
297 views

Apache LimitExcept GET to IP address but deny all methods to other IPs

I'm having some trouble with getting the Order directive right in a vhost configuration in Apache. I have some IP addresses that I want to totally deny access to the entire vhost. These have been ...
0
votes
0answers
31 views

Windows Server 2008 and Filtered Extensions

My Windows Server 2008 box is filtering some extensions and stopping me from uploading (via FTP) the files or creating new ones. E.g. the Administrator user can create .js files in its own home, but ...
2
votes
1answer
445 views

Windows Server 2008 r2 IIS: can't allow access to file extension in request filtering

I have a Windows Server 2008 r2 installation with configured FTP and IIS. If I upload through FTP two files: "test.txt" and "test.abc" and then try to access these files through HTTP, then I can ...
1
vote
1answer
661 views

IIS 7 - Enabling deny url sequences with backslash

I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using: <configuration> <system.webServer> <security> ...
1
vote
2answers
2k views

What file extensions must be allowed in request filtering when using ASP.Net MVC 3?

I have request filtering enabled and "Allow unlisted file name extensions" is set to false. When requesting any normal path, including "http://localhost" I get a 404.7 error - "The request filtering ...
1
vote
0answers
275 views

IIS 7.5 Request Filtering - best practice rules?

Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default. Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only ...
0
votes
1answer
281 views

Block certain filetypes and values found in the url in IIS

I have someone who is not supposed to be scanning my site attempting to exploit some php vulnerabilities. I have started blocknig their IP's but more than one person is doing it, and each request ...
0
votes
1answer
223 views

IIS Request Filtering blocks Application Request Routing

Using one box, I have an IIS server and a tracd server running. Via ARR, any request on the IIS server matching /trac/* is proxied through to the tracd server. Everything is working fine, except when ...
1
vote
1answer
7k views

Request Filtering is missing from IIS Manager

I have a recently installed Web Server and i want to do some request filtering to stop spam bots requesting contacts.php files and stuff like that. The problem is that i can't find the request ...
3
votes
1answer
2k views

IIS 7.5 Request Filtering logs versus UrlScan 3.1

When IIS 7.5 Request Filtering blocks a request it seems to add an entry into the regular IIS web logs with a 404. a) Is there any way to send the detailed Request Filtering logs to a separate file? ...