how to disable http methods via iis

Question

We have unnecessary http methods enabled on one of our servers, and have been advised to disable any methods we do not require. The problem I have is that I am unsure of how to disable the unused methods. Can anyone provide an example or walkthrough on how to-do this ?

We are using a windows 2003 std server running IIS6

You would be better off with this on serverfault.

tjons
– tjons

2013-11-19 14:51:16 +00:00
Commented Nov 19, 2013 at 14:51 — tjons
– tjons, Commented Nov 19, 2013 at 14:51

Taylan Aydinli · Accepted Answer · 2013-11-19 14:49:49Z

2

In IIS Manager, right click on the website and select Properties. Switch to the Home Directory tab, and click the Configuration button. In the list of application extensions, locate the extension that your web application uses and click the Edit button. In the Limit To field, specify the method you want to support and delete the ones you don't. This will work on a specific application. I don't exactly know how to apply this setting server wide unfortunately. This might lead you in the right direction though.

answered Nov 19, 2013 at 14:49

Taylan Aydinli

4,37315 gold badges42 silver badges33 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

how to disable http methods via iis

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related