title: How can we deny certain HTTP methods in IIS?
body: <p>I would like to disable HTTP methods in <code>web.config</code> but i couldn't do it. I just would like to enable <code>GET</code> &amp; <code>POST</code> methods. Tried like this:</p>
  
  <pre><code>    &lt;security&gt;
        &lt;requestFiltering&gt;
         &lt;verbs allowUnlisted="false" applyToWebDAV="true"&gt;
            &lt;clear/&gt;
            &lt;add verb="GET" allowed="true" /&gt;
            &lt;add verb="POST" allowed="true" /&gt;
            &lt;add verb="OPTIONS" allowed="false" /&gt;
            &lt;add verb="TRACE" allowed="false"/&gt;
            &lt;add verb="TRACK" allowed="false"/&gt;
            &lt;add verb="HEAD" allowed="false"/&gt;
            &lt;add verb="PROPFIND" allowed="false"/&gt;
            &lt;add verb="PUT" allowed="false"/&gt;
            &lt;add verb="COPY" allowed="false"/&gt;
            &lt;add verb="LOCK" allowed="false"/&gt;
            &lt;add verb="UNLOCK" allowed="false"/&gt;
            &lt;add verb="PROPPATCH" allowed="false"/&gt;
            &lt;add verb="MKCOL" allowed="false"/&gt;
            &lt;add verb="MOVE" allowed="false"/&gt;
            &lt;add verb="DELETE" allowed="false"/&gt;
            &lt;add verb="SEARCH" allowed="false"/&gt;
          &lt;/verbs&gt;
        &lt;/requestFiltering&gt;
      &lt;/security&gt;
  </code></pre>
  
  <p>Am I doing something wrong? I've search a lot but what do you prefer for disabling this verbs?</p>