Core 6 and IIS 10

Lars Ole Christiansen 1 Reputation point
2022-10-31T09:42:02.257+00:00

On server win 2019 and IIS 10 I have installed Core 6 runtime

I have built a core application create an app pool and set to no managed code

But the application stops with errors

HTTP Error 404.7 - Not Found
The request filtering module is configured to deny the file extension.

If I changed to and the application is run now

<requestFiltering allowHighBitCharacters="false">
<fileExtensions allowUnlisted="true">
<remove fileExtension=".config" />
</fileExtensions>
<verbs allowUnlisted="true" />
</requestFiltering>

but I think it's wrong there is a security risk

I have tried to add all file extension I can find I the file system, but I do not help ??

255636-2022-10-31-10-40-18.gif

Internet Information Services
ASP.NET Core
ASP.NET Core
A set of technologies in the .NET Framework for building web applications and XML web services.
4,361 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Lars Ole Christiansen 1 Reputation point
    2022-11-08T13:42:12.537+00:00

    We already have enable detail error page for bad request configuration, but it doesn't tell us anything useful.

    We would like to find out what we as a minimum should turn on / enable, without compromising security.
    We have tried to add all the file types we have used In the application, but it doesn't help

    Are there any recommendation for setting Filtering request/extensions when using .NET Core applications on IIS???

    258258-2022-11-08-14-39-17.gif


  2. Cman Coder 0 Reputation points
    2023-07-27T14:06:05.3466667+00:00

    Hi @Lars Ole Christiansen ,

    I have the same issue, did you find any solution?

    0 comments No comments