Core 6 and IIS 10

Lars Ole Christiansen 1 Reputation point

On server win 2019 and IIS 10 I have installed Core 6 runtime

I have built a core application create an app pool and set to no managed code

But the application stops with errors

HTTP Error 404.7 - Not Found
The request filtering module is configured to deny the file extension.

If I changed to and the application is run now

<requestFiltering allowHighBitCharacters="false">
<fileExtensions allowUnlisted="true">
<remove fileExtension=".config" />
<verbs allowUnlisted="true" />

but I think it's wrong there is a security risk

I have tried to add all file extension I can find I the file system, but I do not help ??


Internet Information Services
A set of technologies in the .NET Framework for building web applications and XML web services.
4,361 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Lars Ole Christiansen 1 Reputation point

    We already have enable detail error page for bad request configuration, but it doesn't tell us anything useful.

    We would like to find out what we as a minimum should turn on / enable, without compromising security.
    We have tried to add all the file types we have used In the application, but it doesn't help

    Are there any recommendation for setting Filtering request/extensions when using .NET Core applications on IIS???


  2. Cman Coder 0 Reputation points

    Hi @Lars Ole Christiansen ,

    I have the same issue, did you find any solution?

    0 comments No comments