Re: Disable trace and track verbs

anonymous_at_discussions.microsoft.com
Date: 02/11/04 

Date: Wed, 11 Feb 2004 10:06:08 -0800

Respones is 404. Shouldnt it be 403? 404 respone will
cause it to fail security checkers for that verb. I see
it in the logs rejecting the verb trace and track. I am
using the allowverbs option and trace and track are not
specified. Thanks for the help
>-----Original Message-----
>Are the responses 200 or 404?
>Are you using a RejectResponseUrl that points to content?
>
>--
>//David
>IIS
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>//
>"Rob" <anonymous@discussions.microsoft.com> wrote in
message
>news:e61f01c3f030$dfc98bd0$a601280a@phx.gbl...
>I have installed URLScan and i am still get a respond on
>my web site to trace and track commands. I thought
>URLScan 2.5 woul take care of it. I have the AllowVerbs
>set to 1 and then the very TRACE and track are not in
>that section.
>
>Any ideas?
>
>
>.
>

Relevant Pages

  • Re: How to disable HTTP trace in IIS 5
    ... I don't believe that IIS 5.0 has any inbuilt ability to "disable" any HTTP verbs (except for ISAPI extensions, where you can choose which verbs are permitted). ... URLScan is a high priority ISAPI filter, so it can load before anything else, and you can block TRACE verb there. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Disable trace and track verbs
    ... > it in the logs rejecting the verb trace and track. ... > using the allowverbs option and trace and track are not ... >>I have installed URLScan and i am still get a respond on ...
    (microsoft.public.inetserver.iis.security)