Disabling "put" method

  • Thread starter Thread starter S. Arakawa
  • Start date Start date
S

S. Arakawa

Hello All,

I just went through a security audit, and it was
recommened that I disable the "put" method on my webserver
(IIS 5.0). How is this done?
 
S. Arakawa said:
I just went through a security audit, and it was
recommened that I disable the "put" method on my webserver
(IIS 5.0). How is this done?

If you're using URLScan, put "PUT" in the DenyVerbs section, and
ensure it does not appear in the AllowVerbs section.

--
Ryan D Johnson [MS]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no
rights. Use of included script samples are subject to the terms
specified at http://www.microsoft.com/info/cpyright.htm
 
-----Original Message-----
S. Arakawa said:
I just went through a security audit, and it was
recommened that I disable the "put" method on my webserver
(IIS 5.0). How is this done?

If you're using URLScan, put "PUT" in the DenyVerbs section, and
ensure it does not appear in the AllowVerbs section.

--
Ryan D Johnson [MS]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no
rights. Use of included script samples are subject to the terms
specified at http://www.microsoft.com/info/cpyright.htm
.

Thank you for your response. I will follow-up on using
URLScan. Do you know how to do this without URLScan (i.e.
manually)?

Take Care & Thanks Again!
 
S. Arakawa said:
Thank you for your response. I will follow-up on using URLScan. Do
you know how to do this without URLScan (i.e. manually)?

Sorry, I don't know how to do it except through URLScan.

--
Ryan D Johnson [MS]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no
rights. Use of included script samples are subject to the terms
specified at http://www.microsoft.com/info/cpyright.htm
 
Back
Top