One of the IIS sites I manage forwards all the requests to Apache. This means that any request, including requests to files such as .config
, should be forwarded.
<security>
<requestFiltering>
<denyUrlSequences>
<clear />
</denyUrlSequences>
<fileExtensions allowUnlisted="true">
<clear />
<add fileExtension=".config" allowed="true" />
</fileExtensions>
</requestFiltering>
</security>
doesn't help, since IIS is still blocking .config
files. What should I do?