Re: URLScan

From: Jeff Cochran (jcochran.nospam_at_naplesgov.com)
Date: 12/11/03 

Date: Thu, 11 Dec 2003 21:31:16 GMT

On 11 Dec 2003 10:05:04 -0800, rich_legend@yahoo.com (Rich) wrote:

>Hi Guys
>
>Can anyone help with allowing full stops using URLScan the error is
>
>Client at 127.0.0.1: URL contains extension '.', which is not
>specifically allowed. Request will be rejected. Site Instance='1',
>Raw URL='/TestWeb'
>
>I can not find '.' any where in the urlscan.ini file

You won't. It's being blocked because it's not specifcally in the
[ALLOW EXTENSIONS] section (it's actually not an extension) and you
have USE ALLOW EXTENSIONS=1. Either set that to 0, and use the DENY
section instead, or in the [Allow Extensions] section add the
extension "."

Jeff

Relevant Pages

  • URLSCAN on IIS6 config
    ... in the allow extensions settings ... >I am having some problems getting URLScan 2.5 running ... >Request will be rejected. ... Extensions listed here are commonly used on a typical ...
    (microsoft.public.inetserver.iis)
  • Re: Distinguishing between characters and numbers
    ... Is this a g95 bug? ... extensions appear to be clever (where clever is actually a swear word when ... Such extensions are surely baggage that Digital/Compaq/Intel has picked up ... Or at least a request by sales when a new sale got hung up on the absense of the extension during the demonstration phase. ...
    (comp.lang.fortran)
  • Re: IIS and HTTP API
    ... IIS will only read UploadReadAheadSize (a ... > Whether you process the data on the fly or store it in RAM is up to you. ... It's true for extensions if you read the request entity body, ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 6.0 400 - Bad Request with an ISAPI DLL
    ... No server extensions. ... the very first request, other times it will go for 3-4, ... >Have you allowed ISAPI extensions. ... were sent by the IIS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Serving pages which do not exist
    ... map *.* extensions to ASP.NET so that all requests not ... Note that you can also do some tricks onfiguring IIS such that when ever a ... Where> IIS receives a request for a specific page, but the request is actually> internally mapped to something else. ...
    (microsoft.public.dotnet.framework.aspnet)