title: How to properly disable HTTP verbs?
body: <p>We've added the following to our <code>Web.config</code>:</p>
  
  <pre><code>&lt;system.webServer&gt;
    &lt;security&gt;
      &lt;requestFiltering&gt;
        &lt;verbs allowUnlisted="false"&gt;
          &lt;clear/&gt;
          &lt;add verb="GET" allowed="true"/&gt;
          &lt;add verb="POST" allowed="true"/&gt;
        &lt;/verbs&gt;
      &lt;/requestFiltering&gt;
    &lt;/security&gt;
  &lt;/system.webServer&gt;
  </code></pre>
  
  <p>When we do an <code>Invoke-WebRequest</code> with PowerShell for other verbs than <code>GET</code> and <code>POST</code> we get the message:</p>
  
  <blockquote>
    <p>The remote server returned an error: (404) Not Found.</p>
  </blockquote>
  
  <p>Does this mean the verb is disabled? Or is there a better way? </p>