question

TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 asked hrojas answered

Windows server 16 with a website

My windows server 16 has: IIS, DNS and active director

My local server is obama.local and I host a website call obama.work

The external clients can access the website without any problem

The internal clients can't access the website

I will need to configure DNS Forward Lookup zone but don't the details.
I configures the lookup zone with the following:

obama.work
Name = cpanel
Type= Host(a)
Data = <The external IP address>


This is all I have and is not working.
Can you please help me or give me a web page with information as what to do?

windows-serverwindows-server-iis
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 answered

@DSPatrick I am able to ping my internal and external IP address.
Looks like the problem maybe in the IIS? I am reading @CandyLuo-MSFT comment.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CandyLuo-MSFT avatar image
0 Votes"
CandyLuo-MSFT answered

Hi @TiaRojas-5756 ,

I have discussed with my IIS colleagues, if possible, please post web.config file for us to find some clues.

If I enter the "internal IP" "www.obama.com" I am able to access the intranet website on that computer only but, I can't be updating all the iphones and ipads host files for all users.

By the way, I noticed that you said enter the "internal IP" "www.obama.com" then you can access the intranet website. How did you access the website? Can you access the website by IP address at that time?

Best Regards,
Candy





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 answered CandyLuo-MSFT commented

@CandyLuo-MSFT that message is in reference to updating the C:\Windows\System32\drivers\etc\host file with <internal IP> www.obama.com. this solution only works if I update the host file of all the iphones and ipads that we use. I don't want to use this solution.


I have a lot of web.config files. Is this the one that you want?
C:\Users\administrator.OBAMA\AppData\Local\Microsoft\Office\SolutionPackages\ca5fad937e92d69a1194ecbd63a29c56\PackageResources\build


<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<system.webServer>
<rewrite>
<rules>
<!-- Redirect to https -->
<rule name="Redirect to https">
<match url="(.*)"/>
<conditions>
<add input="{HTTPS}" pattern="Off"/>
<add input="{REQUEST_METHOD}" pattern="^get$|^head$" />
</conditions>
<action type="Redirect" url="https://{HTTP_HOST}/{R:1}"/>
</rule>
</rules>

         <outboundRules>
             <!-- Disable caching for HTML files -->
             <rule name="DisableCacheHTMLFiles" preCondition="IsHTMLFile">
                 <match serverVariable="RESPONSE_Cache-Control" pattern=".*" />
                 <action type="Rewrite" value="no-cache, no-store" />
             </rule>
             <preConditions>
                 <preCondition name="IsHTMLFile">
                     <add input="{REQUEST_FILENAME}" pattern=".*\.html" />
                 </preCondition>
             </preConditions>
         </outboundRules>
     </rewrite>
 </system.webServer>

</configuration>

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Please also provide pplicationHost. config, the location is: %windir%\system32\inetsrv\config\applicationHost.config, please provide HTTPS bindings for the web sites, which is the content under the <site> node.

0 Votes 0 ·
TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 answered

@candyLuo-MSFT the applicationHost.config is too large to transfer. I had to put the information in the page


The HTTPS binding image:

100617-image.png




<?xml version="1.0" encoding="UTF-8"?>
<!--

 IIS configuration sections.

 For schema documentation, see
 %windir%\system32\inetsrv\config\schema\IIS_schema.xml.
    
 Please make a backup of this file before making any changes to it.

-->

<configuration>

 <!--

     The <configSections> section controls the registration of sections.
     Section is the basic unit of deployment, locking, searching and
     containment for configuration settings.
        
     Every section belongs to one section group.
     A section group is a container of logically-related sections.
        
     Sections cannot be nested.
     Section groups may be nested.
        
     <section
         name=""  [Required, Collection Key] [XML name of the section]
         allowDefinition="Everywhere" [MachineOnly|MachineToApplication|AppHostOnly|Everywhere] [Level where it can be set]
         overrideModeDefault="Allow"  [Allow|Deny] [Default delegation mode]
         allowLocation="true"  [true|false] [Allowed in location tags]
     />
        
     The recommended way to unlock sections is by using a location tag:
     <location path="Default Web Site" overrideMode="Allow">
         <system.webServer>
             <asp />
         </system.webServer>
     </location>

 -->
 <configSections>
     <sectionGroup name="system.applicationHost">
         <section name="applicationPools" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="configHistory" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="customMetadata" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="listenerAdapters" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="log" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="serviceAutoStartProviders" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="sites" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="webLimits" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
     </sectionGroup>

     <sectionGroup name="system.webServer">
         <section name="asp" overrideModeDefault="Deny" />
         <section name="caching" overrideModeDefault="Allow" />
         <section name="cgi" overrideModeDefault="Deny" />
         <section name="defaultDocument" overrideModeDefault="Allow" />
         <section name="directoryBrowse" overrideModeDefault="Allow" />
         <section name="fastCgi" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="globalModules" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
         <section name="handlers" overrideModeDefault="Deny" />
         <section name="httpCompression" overrideModeDefault="Allow" />
         <section name="httpErrors" overrideModeDefault="Allow" />
         <section name="httpLogging" overrideModeDefault="Deny" />
         <section name="httpProtocol" overrideModeDefault="Allow" />
         <section name="httpRedirect" overrideModeDefault="Allow" />
         <section name="httpTracing" overrideModeDefault="Deny" />
         <section name="isapiFilters" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />
         <section name="modules" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />
         <section name="applicationInitialization" allowDefinition="MachineToApplication" overrideModeDefault="Allow" />
         <section name="odbcLogging" overrideModeDefault="Deny" />
         <sectionGroup name="security">
             <section name="access" overrideModeDefault="Deny" />
             <section name="applicationDependencies" overrideModeDefault="Deny" />
             <sectionGroup name="authentication">
                 <section name="anonymousAuthentication" overrideModeDefault="Deny" />
                 <section name="basicAuthentication" overrideModeDefault="Deny" />
                 <section name="clientCertificateMappingAuthentication" overrideModeDefault="Deny" />
                 <section name="digestAuthentication" overrideModeDefault="Deny" />
                 <section name="iisClientCertificateMappingAuthentication" overrideModeDefault="Deny" />
                 <section name="windowsAuthentication" overrideModeDefault="Deny" />
             </sectionGroup>
             <section name="authorization" overrideModeDefault="Allow" />
             <section name="ipSecurity" overrideModeDefault="Deny" />
             <section name="dynamicIpSecurity" overrideModeDefault="Deny" />
             <section name="isapiCgiRestriction" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />
             <section name="requestFiltering" overrideModeDefault="Allow" />
         </sectionGroup>
         <section name="serverRuntime" overrideModeDefault="Deny" />
         <section name="serverSideInclude" overrideModeDefault="Deny" />
         <section name="staticContent" overrideModeDefault="Allow" />
         <sectionGroup name="tracing">
             <section name="traceFailedRequests" overrideModeDefault="Allow" />
             <section name="traceProviderDefinitions" overrideModeDefault="Deny" />
         </sectionGroup>
         <section name="urlCompression" overrideModeDefault="Allow" />
         <section name="validation" overrideModeDefault="Allow" />
         <sectionGroup name="webdav">
             <section name="globalSettings" overrideModeDefault="Deny" />
             <section name="authoring" overrideModeDefault="Deny" />
             <section name="authoringRules" overrideModeDefault="Deny" />
         </sectionGroup>
         <section name="webSocket" overrideModeDefault="Deny" />
         <sectionGroup name="rewrite">
             <section name="rules" overrideModeDefault="Allow" />
             <section name="globalRules" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />
             <section name="outboundRules" overrideModeDefault="Allow" />
             <section name="providers" overrideModeDefault="Allow" />
             <section name="rewriteMaps" overrideModeDefault="Allow" />
             <section name="allowedServerVariables" overrideModeDefault="Deny" />
         </sectionGroup>
     </sectionGroup>
     <sectionGroup name="system.ftpServer">
         <section name="log" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />
         <section name="firewallSupport" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />
         <section name="caching" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />
         <section name="providerDefinitions" overrideModeDefault="Deny" />
         <sectionGroup name="security">
             <section name="ipSecurity" overrideModeDefault="Deny" />
             <section name="requestFiltering" overrideModeDefault="Deny" />
             <section name="authorization" overrideModeDefault="Deny" />
             <section name="authentication" overrideModeDefault="Deny" />
         </sectionGroup>
         <section name="serverRuntime" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />
     </sectionGroup>
 </configSections>

 <configProtectedData>
     <providers>
         <add name="IISWASOnlyRsaProvider" type="" description="Uses RsaCryptoServiceProvider to encrypt and decrypt" keyContainerName="iisWasKey" cspProviderName="" useMachineContainer="true" useOAEP="false" />
         <add name="IISCngProvider" type="Microsoft.ApplicationHost.CngProtectedConfigurationProvider" description="Uses Win32 Crypto CNG to encrypt and decrypt" keyContainerName="iisCngConfigurationKey" useMachineContainer="true" />
         <add name="IISWASOnlyCngProvider" type="Microsoft.ApplicationHost.CngProtectedConfigurationProvider" description="(WAS Only) Uses Win32 Crypto CNG to encrypt and decrypt" keyContainerName="iisCngWasKey" useMachineContainer="true" />
         <add name="AesProvider" type="Microsoft.ApplicationHost.AesProtectedConfigurationProvider" description="Uses an AES session key to encrypt and decrypt" keyContainerName="iisConfigurationKey" cspProviderName="" useOAEP="false" useMachineContainer="true" sessionKey="AQIAAA5mAAAApAAA4T5XxyMXcFs5ibaamsetTcaveBuBFxIjwl/c/yS/vCcCmw1Tho9pZUm44r6+WbO75fKQrA+A6dDTRc+COFQcExXHjW9mbjNef5/SFjmwv5NhL/VN5WLsCP/Dhco2zp1fIYyBGX/iholE0oDddFCKyTQV5EPVSxGivX7aFpkydNvfFbHWaS27c4yFToo7Awv2XonQ7zBU0PCzREjSl15mwiRqINnAhHrgeIIYep1aQ4DHgbXteLi9kxJGxFii3HhU0E4t57ASZd6A5GiN7aHUHhZczF45k9Pek8aJB8zAhFTNhrsTpNweviKqplMeHLtoMGZXWomSpzkQASciTxOjUA==" />
         <add name="IISWASOnlyAesProvider" type="Microsoft.ApplicationHost.AesProtectedConfigurationProvider" description="Uses an AES session key to encrypt and decrypt" keyContainerName="iisWasKey" cspProviderName="" useOAEP="false" useMachineContainer="true" sessionKey="AQIAAA5mAAAApAAAvkhPCG2r/vbYqHR2bq147CnKwJUEDQnWfrHmHGgOpF9+GgLKfNmbvwoV6Fg4Kl5QeRtqexoRcGnS1Tn2F4zUPUSUFDRaRS10Ctjajr4xVO3bcfkvl1KlP/MRbsg2AwJxU/KPD5uEqiuSmw6Mt/ifwsXVPTaTJLj70Wemjnr5v0KpqEGYK18jpKsjP50lP2A+eTrjRQLgGbSQL80Wbdl6aKX5fcnoD9lZZsxTwOAFRPhVsrNVn2zL/E9cvAq46QD2SGmzbeRp1nUjX0pNzoprMX0cjILuqNSmdT+fpnFhVMS4NGDraou8JqP3iHG87O21Z9K4AqlFLzIZz1uDeY76Ww==" />
     </providers>
 </configProtectedData>

 <system.applicationHost>

     <applicationPools>
         <add name="DefaultAppPool" autoStart="false" />
         <add name="CMO" autoStart="true" enable32BitAppOnWin64="true" />
         <add name="Classic .NET AppPool" managedRuntimeVersion="v2.0" managedPipelineMode="Classic" />
         <add name=".NET v2.0 Classic" managedRuntimeVersion="v2.0" managedPipelineMode="Classic" />
         <add name=".NET v2.0" managedRuntimeVersion="v2.0" />
         <add name=".NET v4.5 Classic" managedRuntimeVersion="v4.0" managedPipelineMode="Classic" />
         <add name=".NET v4.5" managedRuntimeVersion="v4.0" />
         <add name="CMOV2" enable32BitAppOnWin64="true" />
         <applicationPoolDefaults managedRuntimeVersion="v4.0">
             <processModel identityType="ApplicationPoolIdentity" />
         </applicationPoolDefaults>
     </applicationPools>

     <!--

       The <customMetadata> section is used internally by the Admin Base Objects
       (ABO) Compatibility component. Please do not modify its content.

     -->
     <customMetadata>
         <key path="LM/W3SVC/INFO">
             <property id="4012" dataType="String" userType="1" attributes="Inherit" value="NCSA Common Log File Format,Microsoft IIS Log File Format,W3C Extended Log File Format,ODBC Logging" />
             <property id="2120" dataType="MultiSZ" userType="1" attributes="None" value="400,0,,,0&#xA;" />
         </key>
     </customMetadata>

     <!--

       The <listenerAdapters> section defines the protocols with which the
       Windows Process Activation Service (WAS) binds.

     -->
     <listenerAdapters>
         <add name="http" />
         <add name="net.tcp" identity="S-1-5-80-3579033775-2824656752-1522793541-1960352512-462907086" />
         <add name="net.msmq" identity="S-1-5-80-89244771-1762554971-1007993102-348796144-2203111529" />
         <add name="msmq.formatname" identity="S-1-5-80-89244771-1762554971-1007993102-348796144-2203111529" />
         <add name="net.pipe" identity="S-1-5-80-2943419899-937267781-4189664001-1229628381-3982115073" />
     </listenerAdapters>

     <log>
         <centralBinaryLogFile enabled="true" directory="%SystemDrive%\inetpub\logs\LogFiles" />
         <centralW3CLogFile enabled="true" directory="%SystemDrive%\inetpub\logs\LogFiles" />
     </log>

     <sites>
         <site name="Default Web Site" id="1" serverAutoStart="false">
             <application path="/">
                 <virtualDirectory path="/" physicalPath="%SystemDrive%\inetpub\wwwroot" />
             </application>
             <bindings>
                 <binding protocol="net.tcp" bindingInformation="808:*" />
                 <binding protocol="net.msmq" bindingInformation="localhost" />
                 <binding protocol="msmq.formatname" bindingInformation="localhost" />
                 <binding protocol="net.pipe" bindingInformation="*" />
             </bindings>
         </site>
         <site name="CMOV2" id="3" serverAutoStart="true">
             <application path="/" applicationPool="CMOV2">
                 <virtualDirectory path="/" physicalPath="C:\Program Files (x86)\Distinctive Systems Ltd\CMOV2" />
             </application>
             <bindings>
                 <binding protocol="http" bindingInformation="20.0.0.8:80:" />
                 <binding protocol="https" bindingInformation="*:443:www.obama.work" sslFlags="0" />
             </bindings>
         </site>
         <siteDefaults>
             <logFile logFormat="W3C" directory="%SystemDrive%\inetpub\logs\LogFiles" />
             <traceFailedRequestsLogging directory="%SystemDrive%\inetpub\logs\FailedReqLogFiles" />
         </siteDefaults>
         <applicationDefaults applicationPool="DefaultAppPool" />
         <virtualDirectoryDefaults allowSubDirConfig="true" />
     </sites>

     <webLimits />

 </system.applicationHost>

 <system.webServer>

     <asp />

     <caching enabled="true" enableKernelCache="true">
     </caching>

     <cgi />

     <defaultDocument enabled="true">
         <files>
             <add value="Default.htm" />
             <add value="Default.asp" />
             <add value="index.htm" />
             <add value="index.html" />
             <add value="iisstart.htm" />
             <add value="default.aspx" />
         </files>
     </defaultDocument>

     <directoryBrowse enabled="false" />

     <fastCgi />

     <!--

       The <globalModules> section defines all native-code modules.
       To enable a module, specify it in the <modules> section.

     -->
     <globalModules>
         <add name="HttpLoggingModule" image="%windir%\System32\inetsrv\loghttp.dll" />
         <add name="UriCacheModule" image="%windir%\System32\inetsrv\cachuri.dll" />
         <add name="FileCacheModule" image="%windir%\System32\inetsrv\cachfile.dll" />
         <add name="TokenCacheModule" image="%windir%\System32\inetsrv\cachtokn.dll" />
         <add name="HttpCacheModule" image="%windir%\System32\inetsrv\cachhttp.dll" />
         <add name="StaticCompressionModule" image="%windir%\System32\inetsrv\compstat.dll" />
         <add name="DefaultDocumentModule" image="%windir%\System32\inetsrv\defdoc.dll" />
         <add name="DirectoryListingModule" image="%windir%\System32\inetsrv\dirlist.dll" />
         <add name="ProtocolSupportModule" image="%windir%\System32\inetsrv\protsup.dll" />
         <add name="StaticFileModule" image="%windir%\System32\inetsrv\static.dll" />
         <add name="AnonymousAuthenticationModule" image="%windir%\System32\inetsrv\authanon.dll" />
         <add name="RequestFilteringModule" image="%windir%\System32\inetsrv\modrqflt.dll" />
         <add name="CustomErrorModule" image="%windir%\System32\inetsrv\custerr.dll" />
         <add name="BasicAuthenticationModule" image="%windir%\System32\inetsrv\authbas.dll" />
         <add name="WindowsAuthenticationModule" image="%windir%\System32\inetsrv\authsspi.dll" />
         <add name="IsapiModule" image="%windir%\System32\inetsrv\isapi.dll" />
         <add name="IsapiFilterModule" image="%windir%\System32\inetsrv\filter.dll" />
         <add name="ManagedEngine64" image="%windir%\Microsoft.NET\Framework64\v2.0.50727\webengine.dll" preCondition="integratedMode,runtimeVersionv2.0,bitness64" />
         <add name="ManagedEngine" image="%windir%\Microsoft.NET\Framework\v2.0.50727\webengine.dll" preCondition="integratedMode,runtimeVersionv2.0,bitness32" />
         <add name="ManagedEngineV4.0_32bit" image="%windir%\Microsoft.NET\Framework\v4.0.30319\webengine4.dll" preCondition="integratedMode,runtimeVersionv4.0,bitness32" />
         <add name="ManagedEngineV4.0_64bit" image="%windir%\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll" preCondition="integratedMode,runtimeVersionv4.0,bitness64" />
         <add name="ApplicationInitializationModule" image="%windir%\System32\inetsrv\warmup.dll" />
         <add name="ConfigurationValidationModule" image="%windir%\System32\inetsrv\validcfg.dll" />
         <add name="HttpRedirectionModule" image="%windir%\System32\inetsrv\redirect.dll" />
         <add name="RewriteModule" image="%SystemRoot%\system32\inetsrv\rewrite.dll" />
     </globalModules>

     <httpCompression directory="%SystemDrive%\inetpub\temp\IIS Temporary Compressed Files">
         <scheme name="gzip" dll="%Windir%\system32\inetsrv\gzip.dll" />
         <staticTypes>
             <add mimeType="text/*" enabled="true" />
             <add mimeType="message/*" enabled="true" />
             <add mimeType="application/javascript" enabled="true" />
             <add mimeType="application/atom+xml" enabled="true" />
             <add mimeType="application/xaml+xml" enabled="true" />
             <add mimeType="image/svg+xml" enabled="true" />
             <add mimeType="*/*" enabled="false" />
         </staticTypes>
     </httpCompression>

     <httpErrors lockAttributes="allowAbsolutePathsWhenDelegated,defaultPath">
         <error statusCode="401" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="401.htm" />
         <error statusCode="403" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="403.htm" />
         <error statusCode="404" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="404.htm" />
         <error statusCode="405" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="405.htm" />
         <error statusCode="406" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="406.htm" />
         <error statusCode="412" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="412.htm" />
         <error statusCode="500" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="500.htm" />
         <error statusCode="501" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="501.htm" />
         <error statusCode="502" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="502.htm" />
     </httpErrors>

     <httpLogging dontLog="false" />

     <httpProtocol>
         <customHeaders>
             <clear />
             <add name="X-Powered-By" value="ASP.NET" />
         </customHeaders>
         <redirectHeaders>
             <clear />
         </redirectHeaders>
     </httpProtocol>

     <httpRedirect enabled="false" />

     <httpTracing />

     <isapiFilters>
         <filter name="ASP.Net_2.0.50727-64" path="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv2.0,bitness64" />
         <filter name="ASP.Net_2.0.50727.0" path="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv2.0,bitness32" />
         <filter name="ASP.Net_4.0_32bit" path="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv4.0,bitness32" />
         <filter name="ASP.Net_4.0_64bit" path="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv4.0,bitness64" />
     </isapiFilters>

     <odbcLogging />

     <security>

         <access sslFlags="None" />

         <applicationDependencies />

         <authentication>

             <anonymousAuthentication enabled="true" userName="IUSR" />

             <basicAuthentication enabled="false" />

             <clientCertificateMappingAuthentication />

             <digestAuthentication />

             <iisClientCertificateMappingAuthentication />

             <windowsAuthentication enabled="false" authPersistNonNTLM="true">
                 <providers>
                     <add value="Negotiate" />
                     <add value="NTLM" />
                 </providers>
             </windowsAuthentication>

         </authentication>

         <authorization />

         <ipSecurity />

         <isapiCgiRestriction>
             <add path="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v2.0.50727" description="ASP.NET v2.0.50727" />
             <add path="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v2.0.50727" description="ASP.NET v2.0.50727" />
             <add path="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v4.0.30319" description="ASP.NET v4.0.30319" />
             <add path="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v4.0.30319" description="ASP.NET v4.0.30319" />
         </isapiCgiRestriction>

         <requestFiltering>
             <fileExtensions allowUnlisted="true" applyToWebDAV="true">
                 <add fileExtension=".asax" allowed="false" />
                 <add fileExtension=".ascx" allowed="false" />
                 <add fileExtension=".master" allowed="false" />
                 <add fileExtension=".skin" allowed="false" />
                 <add fileExtension=".browser" allowed="false" />
                 <add fileExtension=".sitemap" allowed="false" />
                 <add fileExtension=".config" allowed="false" />
                 <add fileExtension=".cs" allowed="false" />
                 <add fileExtension=".csproj" allowed="false" />
                 <add fileExtension=".vb" allowed="false" />
                 <add fileExtension=".vbproj" allowed="false" />
                 <add fileExtension=".webinfo" allowed="false" />
                 <add fileExtension=".licx" allowed="false" />
                 <add fileExtension=".resx" allowed="false" />
                 <add fileExtension=".resources" allowed="false" />
                 <add fileExtension=".mdb" allowed="false" />
                 <add fileExtension=".vjsproj" allowed="false" />
                 <add fileExtension=".java" allowed="false" />
                 <add fileExtension=".jsl" allowed="false" />
                 <add fileExtension=".ldb" allowed="false" />
                 <add fileExtension=".dsdgm" allowed="false" />
                 <add fileExtension=".ssdgm" allowed="false" />
                 <add fileExtension=".lsad" allowed="false" />
                 <add fileExtension=".ssmap" allowed="false" />
                 <add fileExtension=".cd" allowed="false" />
                 <add fileExtension=".dsprototype" allowed="false" />
                 <add fileExtension=".lsaprototype" allowed="false" />
                 <add fileExtension=".sdm" allowed="false" />
                 <add fileExtension=".sdmDocument" allowed="false" />
                 <add fileExtension=".mdf" allowed="false" />
                 <add fileExtension=".ldf" allowed="false" />
                 <add fileExtension=".ad" allowed="false" />
                 <add fileExtension=".dd" allowed="false" />
                 <add fileExtension=".ldd" allowed="false" />
                 <add fileExtension=".sd" allowed="false" />
                 <add fileExtension=".adprototype" allowed="false" />
                 <add fileExtension=".lddprototype" allowed="false" />
                 <add fileExtension=".exclude" allowed="false" />
                 <add fileExtension=".refresh" allowed="false" />
                 <add fileExtension=".compiled" allowed="false" />
                 <add fileExtension=".msgx" allowed="false" />
                 <add fileExtension=".vsdisco" allowed="false" />
                 <add fileExtension=".rules" allowed="false" />
             </fileExtensions>
             <verbs allowUnlisted="true" applyToWebDAV="true" />
             <hiddenSegments applyToWebDAV="true">
                 <add segment="web.config" />
                 <add segment="bin" />
                 <add segment="App_code" />
                 <add segment="App_GlobalResources" />
                 <add segment="App_LocalResources" />
                 <add segment="App_WebReferences" />
                 <add segment="App_Data" />
                 <add segment="App_Browsers" />
             </hiddenSegments>
         </requestFiltering>

     </security>

     <serverRuntime />

     <serverSideInclude />

     <staticContent lockAttributes="isDocFooterFileName">
         <mimeMap fileExtension=".323" mimeType="text/h323" />
         <mimeMap fileExtension=".3g2" mimeType="video/3gpp2" />
         <mimeMap fileExtension=".3gp2" mimeType="video/3gpp2" />
         <mimeMap fileExtension=".3gp" mimeType="video/3gpp" />
         <mimeMap fileExtension=".3gpp" mimeType="video/3gpp" />
         <mimeMap fileExtension=".aaf" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".aac" mimeType="audio/aac" />
         <mimeMap fileExtension=".aca" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".accdb" mimeType="application/msaccess" />
         <mimeMap fileExtension=".accde" mimeType="application/msaccess" />
         <mimeMap fileExtension=".accdt" mimeType="application/msaccess" />
         <mimeMap fileExtension=".acx" mimeType="application/internet-property-stream" />
         <mimeMap fileExtension=".adt" mimeType="audio/vnd.dlna.adts" />
         <mimeMap fileExtension=".adts" mimeType="audio/vnd.dlna.adts" />
         <mimeMap fileExtension=".afm" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".ai" mimeType="application/postscript" />
         <mimeMap fileExtension=".aif" mimeType="audio/x-aiff" />
         <mimeMap fileExtension=".aifc" mimeType="audio/aiff" />
         <mimeMap fileExtension=".aiff" mimeType="audio/aiff" />
         <mimeMap fileExtension=".appcache" mimeType="text/cache-manifest" />
         <mimeMap fileExtension=".application" mimeType="application/x-ms-application" />
         <mimeMap fileExtension=".art" mimeType="image/x-jg" />
         <mimeMap fileExtension=".asd" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".asf" mimeType="video/x-ms-asf" />
         <mimeMap fileExtension=".asi" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".asm" mimeType="text/plain" />
         <mimeMap fileExtension=".asr" mimeType="video/x-ms-asf" />
         <mimeMap fileExtension=".asx" mimeType="video/x-ms-asf" />
         <mimeMap fileExtension=".atom" mimeType="application/atom+xml" />
         <mimeMap fileExtension=".au" mimeType="audio/basic" />
         <mimeMap fileExtension=".avi" mimeType="video/avi" />
         <mimeMap fileExtension=".axs" mimeType="application/olescript" />
         <mimeMap fileExtension=".bas" mimeType="text/plain" />
         <mimeMap fileExtension=".bcpio" mimeType="application/x-bcpio" />
         <mimeMap fileExtension=".bin" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".bmp" mimeType="image/bmp" />
         <mimeMap fileExtension=".c" mimeType="text/plain" />
         <mimeMap fileExtension=".cab" mimeType="application/vnd.ms-cab-compressed" />
         <mimeMap fileExtension=".calx" mimeType="application/vnd.ms-office.calx" />
         <mimeMap fileExtension=".cat" mimeType="application/vnd.ms-pki.seccat" />
         <mimeMap fileExtension=".cdf" mimeType="application/x-cdf" />
         <mimeMap fileExtension=".chm" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".class" mimeType="application/x-java-applet" />
         <mimeMap fileExtension=".clp" mimeType="application/x-msclip" />
         <mimeMap fileExtension=".cmx" mimeType="image/x-cmx" />
         <mimeMap fileExtension=".cnf" mimeType="text/plain" />
         <mimeMap fileExtension=".cod" mimeType="image/cis-cod" />
         <mimeMap fileExtension=".cpio" mimeType="application/x-cpio" />
         <mimeMap fileExtension=".cpp" mimeType="text/plain" />
         <mimeMap fileExtension=".crd" mimeType="application/x-mscardfile" />
         <mimeMap fileExtension=".crl" mimeType="application/pkix-crl" />
         <mimeMap fileExtension=".crt" mimeType="application/x-x509-ca-cert" />
         <mimeMap fileExtension=".csh" mimeType="application/x-csh" />
         <mimeMap fileExtension=".css" mimeType="text/css" />
         <mimeMap fileExtension=".csv" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".cur" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".dcr" mimeType="application/x-director" />
         <mimeMap fileExtension=".deploy" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".der" mimeType="application/x-x509-ca-cert" />
         <mimeMap fileExtension=".dib" mimeType="image/bmp" />
         <mimeMap fileExtension=".dir" mimeType="application/x-director" />
         <mimeMap fileExtension=".disco" mimeType="text/xml" />
         <mimeMap fileExtension=".dll" mimeType="application/x-msdownload" />
         <mimeMap fileExtension=".dll.config" mimeType="text/xml" />
         <mimeMap fileExtension=".dlm" mimeType="text/dlm" />
         <mimeMap fileExtension=".doc" mimeType="application/msword" />
         <mimeMap fileExtension=".docm" mimeType="application/vnd.ms-word.document.macroEnabled.12" />
         <mimeMap fileExtension=".docx" mimeType="application/vnd.openxmlformats-officedocument.wordprocessingml.document" />
         <mimeMap fileExtension=".dot" mimeType="application/msword" />
         <mimeMap fileExtension=".dotm" mimeType="application/vnd.ms-word.template.macroEnabled.12" />
         <mimeMap fileExtension=".dotx" mimeType="application/vnd.openxmlformats-officedocument.wordprocessingml.template" />
         <mimeMap fileExtension=".dsp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".dtd" mimeType="text/xml" />
         <mimeMap fileExtension=".dvi" mimeType="application/x-dvi" />
         <mimeMap fileExtension=".dvr-ms" mimeType="video/x-ms-dvr" />
         <mimeMap fileExtension=".dwf" mimeType="drawing/x-dwf" />
         <mimeMap fileExtension=".dwp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".dxr" mimeType="application/x-director" />
         <mimeMap fileExtension=".eml" mimeType="message/rfc822" />
         <mimeMap fileExtension=".emz" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".eot" mimeType="application/vnd.ms-fontobject" />
         <mimeMap fileExtension=".eps" mimeType="application/postscript" />
         <mimeMap fileExtension=".esd" mimeType="application/vnd.ms-cab-compressed" />
         <mimeMap fileExtension=".etx" mimeType="text/x-setext" />
         <mimeMap fileExtension=".evy" mimeType="application/envoy" />
         <mimeMap fileExtension=".exe" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".exe.config" mimeType="text/xml" />
         <mimeMap fileExtension=".fdf" mimeType="application/vnd.fdf" />
         <mimeMap fileExtension=".fif" mimeType="application/fractals" />
         <mimeMap fileExtension=".fla" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".flr" mimeType="x-world/x-vrml" />
         <mimeMap fileExtension=".flv" mimeType="video/x-flv" />
         <mimeMap fileExtension=".gif" mimeType="image/gif" />
         <mimeMap fileExtension=".gtar" mimeType="application/x-gtar" />
         <mimeMap fileExtension=".gz" mimeType="application/x-gzip" />
         <mimeMap fileExtension=".h" mimeType="text/plain" />
         <mimeMap fileExtension=".hdf" mimeType="application/x-hdf" />
         <mimeMap fileExtension=".hdml" mimeType="text/x-hdml" />
         <mimeMap fileExtension=".hhc" mimeType="application/x-oleobject" />
         <mimeMap fileExtension=".hhk" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".hhp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".hlp" mimeType="application/winhlp" />
         <mimeMap fileExtension=".hqx" mimeType="application/mac-binhex40" />
         <mimeMap fileExtension=".hta" mimeType="application/hta" />
         <mimeMap fileExtension=".htc" mimeType="text/x-component" />
         <mimeMap fileExtension=".htm" mimeType="text/html" />
         <mimeMap fileExtension=".html" mimeType="text/html" />
         <mimeMap fileExtension=".htt" mimeType="text/webviewhtml" />
         <mimeMap fileExtension=".hxt" mimeType="text/html" />
         <mimeMap fileExtension=".ico" mimeType="image/x-icon" />
         <mimeMap fileExtension=".ics" mimeType="text/calendar" />
         <mimeMap fileExtension=".ief" mimeType="image/ief" />
         <mimeMap fileExtension=".iii" mimeType="application/x-iphone" />
         <mimeMap fileExtension=".inf" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".ins" mimeType="application/x-internet-signup" />
         <mimeMap fileExtension=".isp" mimeType="application/x-internet-signup" />
         <mimeMap fileExtension=".IVF" mimeType="video/x-ivf" />
         <mimeMap fileExtension=".jar" mimeType="application/java-archive" />
         <mimeMap fileExtension=".java" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".jck" mimeType="application/liquidmotion" />
         <mimeMap fileExtension=".jcz" mimeType="application/liquidmotion" />
         <mimeMap fileExtension=".jfif" mimeType="image/pjpeg" />
         <mimeMap fileExtension=".jpb" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".jpe" mimeType="image/jpeg" />
         <mimeMap fileExtension=".jpeg" mimeType="image/jpeg" />
         <mimeMap fileExtension=".jpg" mimeType="image/jpeg" />
         <mimeMap fileExtension=".js" mimeType="application/javascript" />
         <mimeMap fileExtension=".json" mimeType="application/json" />
         <mimeMap fileExtension=".jsonld" mimeType="application/ld+json" />
         <mimeMap fileExtension=".jsx" mimeType="text/jscript" />
         <mimeMap fileExtension=".latex" mimeType="application/x-latex" />
         <mimeMap fileExtension=".less" mimeType="text/css" />
         <mimeMap fileExtension=".lit" mimeType="application/x-ms-reader" />
         <mimeMap fileExtension=".lpk" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".lsf" mimeType="video/x-la-asf" />
         <mimeMap fileExtension=".lsx" mimeType="video/x-la-asf" />
         <mimeMap fileExtension=".lzh" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".m13" mimeType="application/x-msmediaview" />
         <mimeMap fileExtension=".m14" mimeType="application/x-msmediaview" />
         <mimeMap fileExtension=".m1v" mimeType="video/mpeg" />
         <mimeMap fileExtension=".m2ts" mimeType="video/vnd.dlna.mpeg-tts" />
         <mimeMap fileExtension=".m3u" mimeType="audio/x-mpegurl" />
         <mimeMap fileExtension=".m4a" mimeType="audio/mp4" />
         <mimeMap fileExtension=".m4v" mimeType="video/mp4" />
         <mimeMap fileExtension=".man" mimeType="application/x-troff-man" />
         <mimeMap fileExtension=".manifest" mimeType="application/x-ms-manifest" />
         <mimeMap fileExtension=".map" mimeType="text/plain" />
         <mimeMap fileExtension=".mdb" mimeType="application/x-msaccess" />
         <mimeMap fileExtension=".mdp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".me" mimeType="application/x-troff-me" />
         <mimeMap fileExtension=".mht" mimeType="message/rfc822" />
         <mimeMap fileExtension=".mhtml" mimeType="message/rfc822" />
         <mimeMap fileExtension=".mid" mimeType="audio/mid" />
         <mimeMap fileExtension=".midi" mimeType="audio/mid" />
         <mimeMap fileExtension=".mix" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".mmf" mimeType="application/x-smaf" />
         <mimeMap fileExtension=".mno" mimeType="text/xml" />
         <mimeMap fileExtension=".mny" mimeType="application/x-msmoney" />
         <mimeMap fileExtension=".mov" mimeType="video/quicktime" />
         <mimeMap fileExtension=".movie" mimeType="video/x-sgi-movie" />
         <mimeMap fileExtension=".mp2" mimeType="video/mpeg" />
         <mimeMap fileExtension=".mp3" mimeType="audio/mpeg" />
         <mimeMap fileExtension=".mp4" mimeType="video/mp4" />
         <mimeMap fileExtension=".mp4v" mimeType="video/mp4" />
         <mimeMap fileExtension=".mpa" mimeType="video/mpeg" />
         <mimeMap fileExtension=".mpe" mimeType="video/mpeg" />
         <mimeMap fileExtension=".mpeg" mimeType="video/mpeg" />
         <mimeMap fileExtension=".mpg" mimeType="video/mpeg" />
         <mimeMap fileExtension=".mpp" mimeType="application/vnd.ms-project" />
         <mimeMap fileExtension=".mpv2" mimeType="video/mpeg" />
         <mimeMap fileExtension=".ms" mimeType="application/x-troff-ms" />
         <mimeMap fileExtension=".msi" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".mso" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".mvb" mimeType="application/x-msmediaview" />
         <mimeMap fileExtension=".mvc" mimeType="application/x-miva-compiled" />
         <mimeMap fileExtension=".nc" mimeType="application/x-netcdf" />
         <mimeMap fileExtension=".nsc" mimeType="video/x-ms-asf" />
         <mimeMap fileExtension=".nws" mimeType="message/rfc822" />
         <mimeMap fileExtension=".ocx" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".oda" mimeType="application/oda" />
         <mimeMap fileExtension=".odc" mimeType="text/x-ms-odc" />
         <mimeMap fileExtension=".ods" mimeType="application/oleobject" />
         <mimeMap fileExtension=".oga" mimeType="audio/ogg" />
         <mimeMap fileExtension=".ogg" mimeType="video/ogg" />
         <mimeMap fileExtension=".ogv" mimeType="video/ogg" />
         <mimeMap fileExtension=".one" mimeType="application/onenote" />
         <mimeMap fileExtension=".onea" mimeType="application/onenote" />
         <mimeMap fileExtension=".onetoc" mimeType="application/onenote" />
         <mimeMap fileExtension=".onetoc2" mimeType="application/onenote" />
         <mimeMap fileExtension=".onetmp" mimeType="application/onenote" />
         <mimeMap fileExtension=".onepkg" mimeType="application/onenote" />
         <mimeMap fileExtension=".osdx" mimeType="application/opensearchdescription+xml" />
         <mimeMap fileExtension=".otf" mimeType="font/otf" />
         <mimeMap fileExtension=".p10" mimeType="application/pkcs10" />
         <mimeMap fileExtension=".p12" mimeType="application/x-pkcs12" />
         <mimeMap fileExtension=".p7b" mimeType="application/x-pkcs7-certificates" />
         <mimeMap fileExtension=".p7c" mimeType="application/pkcs7-mime" />
         <mimeMap fileExtension=".p7m" mimeType="application/pkcs7-mime" />
         <mimeMap fileExtension=".p7r" mimeType="application/x-pkcs7-certreqresp" />
         <mimeMap fileExtension=".p7s" mimeType="application/pkcs7-signature" />
         <mimeMap fileExtension=".pbm" mimeType="image/x-portable-bitmap" />
         <mimeMap fileExtension=".pcx" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".pcz" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".pdf" mimeType="application/pdf" />
         <mimeMap fileExtension=".pfb" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".pfm" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".pfx" mimeType="application/x-pkcs12" />
         <mimeMap fileExtension=".pgm" mimeType="image/x-portable-graymap" />
         <mimeMap fileExtension=".pko" mimeType="application/vnd.ms-pki.pko" />
         <mimeMap fileExtension=".pma" mimeType="application/x-perfmon" />
         <mimeMap fileExtension=".pmc" mimeType="application/x-perfmon" />
         <mimeMap fileExtension=".pml" mimeType="application/x-perfmon" />
         <mimeMap fileExtension=".pmr" mimeType="application/x-perfmon" />
         <mimeMap fileExtension=".pmw" mimeType="application/x-perfmon" />
         <mimeMap fileExtension=".png" mimeType="image/png" />
         <mimeMap fileExtension=".pnm" mimeType="image/x-portable-anymap" />
         <mimeMap fileExtension=".pnz" mimeType="image/png" />
         <mimeMap fileExtension=".pot" mimeType="application/vnd.ms-powerpoint" />
         <mimeMap fileExtension=".potm" mimeType="application/vnd.ms-powerpoint.template.macroEnabled.12" />
         <mimeMap fileExtension=".potx" mimeType="application/vnd.openxmlformats-officedocument.presentationml.template" />
         <mimeMap fileExtension=".ppam" mimeType="application/vnd.ms-powerpoint.addin.macroEnabled.12" />
         <mimeMap fileExtension=".ppm" mimeType="image/x-portable-pixmap" />
         <mimeMap fileExtension=".pps" mimeType="application/vnd.ms-powerpoint" />
         <mimeMap fileExtension=".ppsm" mimeType="application/vnd.ms-powerpoint.slideshow.macroEnabled.12" />
         <mimeMap fileExtension=".ppsx" mimeType="application/vnd.openxmlformats-officedocument.presentationml.slideshow" />
         <mimeMap fileExtension=".ppt" mimeType="application/vnd.ms-powerpoint" />
         <mimeMap fileExtension=".pptm" mimeType="application/vnd.ms-powerpoint.presentation.macroEnabled.12" />
         <mimeMap fileExtension=".pptx" mimeType="application/vnd.openxmlformats-officedocument.presentationml.presentation" />
         <mimeMap fileExtension=".prf" mimeType="application/pics-rules" />
         <mimeMap fileExtension=".prm" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".prx" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".ps" mimeType="application/postscript" />
         <mimeMap fileExtension=".psd" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".psm" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".psp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".pub" mimeType="application/x-mspublisher" />
         <mimeMap fileExtension=".qt" mimeType="video/quicktime" />
         <mimeMap fileExtension=".qtl" mimeType="application/x-quicktimeplayer" />
         <mimeMap fileExtension=".qxd" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".ra" mimeType="audio/x-pn-realaudio" />
         <mimeMap fileExtension=".ram" mimeType="audio/x-pn-realaudio" />
         <mimeMap fileExtension=".rar" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".ras" mimeType="image/x-cmu-raster" />
         <mimeMap fileExtension=".rf" mimeType="image/vnd.rn-realflash" />
         <mimeMap fileExtension=".rgb" mimeType="image/x-rgb" />
         <mimeMap fileExtension=".rm" mimeType="application/vnd.rn-realmedia" />
         <mimeMap fileExtension=".rmi" mimeType="audio/mid" />
         <mimeMap fileExtension=".roff" mimeType="application/x-troff" />
         <mimeMap fileExtension=".rpm" mimeType="audio/x-pn-realaudio-plugin" />
         <mimeMap fileExtension=".rtf" mimeType="application/rtf" />
         <mimeMap fileExtension=".rtx" mimeType="text/richtext" />
         <mimeMap fileExtension=".scd" mimeType="application/x-msschedule" />
         <mimeMap fileExtension=".sct" mimeType="text/scriptlet" />
         <mimeMap fileExtension=".sea" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".setpay" mimeType="application/set-payment-initiation" />
         <mimeMap fileExtension=".setreg" mimeType="application/set-registration-initiation" />
         <mimeMap fileExtension=".sgml" mimeType="text/sgml" />
         <mimeMap fileExtension=".sh" mimeType="application/x-sh" />
         <mimeMap fileExtension=".shar" mimeType="application/x-shar" />
         <mimeMap fileExtension=".sit" mimeType="application/x-stuffit" />
         <mimeMap fileExtension=".sldm" mimeType="application/vnd.ms-powerpoint.slide.macroEnabled.12" />
         <mimeMap fileExtension=".sldx" mimeType="application/vnd.openxmlformats-officedocument.presentationml.slide" />
         <mimeMap fileExtension=".smd" mimeType="audio/x-smd" />
         <mimeMap fileExtension=".smi" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".smx" mimeType="audio/x-smd" />
         <mimeMap fileExtension=".smz" mimeType="audio/x-smd" />
         <mimeMap fileExtension=".snd" mimeType="audio/basic" />
         <mimeMap fileExtension=".snp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".spc" mimeType="application/x-pkcs7-certificates" />
         <mimeMap fileExtension=".spl" mimeType="application/futuresplash" />
         <mimeMap fileExtension=".spx" mimeType="audio/ogg" />
         <mimeMap fileExtension=".src" mimeType="application/x-wais-source" />
         <mimeMap fileExtension=".ssm" mimeType="application/streamingmedia" />
         <mimeMap fileExtension=".sst" mimeType="application/vnd.ms-pki.certstore" />
         <mimeMap fileExtension=".stl" mimeType="application/vnd.ms-pki.stl" />
         <mimeMap fileExtension=".sv4cpio" mimeType="application/x-sv4cpio" />
         <mimeMap fileExtension=".sv4crc" mimeType="application/x-sv4crc" />
         <mimeMap fileExtension=".svg" mimeType="image/svg+xml" />
         <mimeMap fileExtension=".svgz" mimeType="image/svg+xml" />
         <mimeMap fileExtension=".swf" mimeType="application/x-shockwave-flash" />
         <mimeMap fileExtension=".t" mimeType="application/x-troff" />
         <mimeMap fileExtension=".tar" mimeType="application/x-tar" />
         <mimeMap fileExtension=".tcl" mimeType="application/x-tcl" />
         <mimeMap fileExtension=".tex" mimeType="application/x-tex" />
         <mimeMap fileExtension=".texi" mimeType="application/x-texinfo" />
         <mimeMap fileExtension=".texinfo" mimeType="application/x-texinfo" />
         <mimeMap fileExtension=".tgz" mimeType="application/x-compressed" />
         <mimeMap fileExtension=".thmx" mimeType="application/vnd.ms-officetheme" />
         <mimeMap fileExtension=".thn" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".tif" mimeType="image/tiff" />
         <mimeMap fileExtension=".tiff" mimeType="image/tiff" />
         <mimeMap fileExtension=".toc" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".tr" mimeType="application/x-troff" />
         <mimeMap fileExtension=".trm" mimeType="application/x-msterminal" />
         <mimeMap fileExtension=".ts" mimeType="video/vnd.dlna.mpeg-tts" />
         <mimeMap fileExtension=".tsv" mimeType="text/tab-separated-values" />
         <mimeMap fileExtension=".ttf" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".tts" mimeType="video/vnd.dlna.mpeg-tts" />
         <mimeMap fileExtension=".txt" mimeType="text/plain" />
         <mimeMap fileExtension=".u32" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".uls" mimeType="text/iuls" />
         <mimeMap fileExtension=".ustar" mimeType="application/x-ustar" />
         <mimeMap fileExtension=".vbs" mimeType="text/vbscript" />
         <mimeMap fileExtension=".vcf" mimeType="text/x-vcard" />
         <mimeMap fileExtension=".vcs" mimeType="text/plain" />
         <mimeMap fileExtension=".vdx" mimeType="application/vnd.ms-visio.viewer" />
         <mimeMap fileExtension=".vml" mimeType="text/xml" />
         <mimeMap fileExtension=".vsd" mimeType="application/vnd.visio" />
         <mimeMap fileExtension=".vss" mimeType="application/vnd.visio" />
         <mimeMap fileExtension=".vst" mimeType="application/vnd.visio" />
         <mimeMap fileExtension=".vsto" mimeType="application/x-ms-vsto" />
         <mimeMap fileExtension=".vsw" mimeType="application/vnd.visio" />
         <mimeMap fileExtension=".vsx" mimeType="application/vnd.visio" />
         <mimeMap fileExtension=".vtx" mimeType="application/vnd.visio" />
         <mimeMap fileExtension=".wav" mimeType="audio/wav" />
         <mimeMap fileExtension=".wax" mimeType="audio/x-ms-wax" />
         <mimeMap fileExtension=".wbmp" mimeType="image/vnd.wap.wbmp" />
         <mimeMap fileExtension=".wcm" mimeType="application/vnd.ms-works" />
         <mimeMap fileExtension=".wdb" mimeType="application/vnd.ms-works" />
         <mimeMap fileExtension=".webm" mimeType="video/webm" />
         <mimeMap fileExtension=".wks" mimeType="application/vnd.ms-works" />
         <mimeMap fileExtension=".wm" mimeType="video/x-ms-wm" />
         <mimeMap fileExtension=".wma" mimeType="audio/x-ms-wma" />
         <mimeMap fileExtension=".wmd" mimeType="application/x-ms-wmd" />
         <mimeMap fileExtension=".wmf" mimeType="application/x-msmetafile" />
         <mimeMap fileExtension=".wml" mimeType="text/vnd.wap.wml" />
         <mimeMap fileExtension=".wmlc" mimeType="application/vnd.wap.wmlc" />
         <mimeMap fileExtension=".wmls" mimeType="text/vnd.wap.wmlscript" />
         <mimeMap fileExtension=".wmlsc" mimeType="application/vnd.wap.wmlscriptc" />
         <mimeMap fileExtension=".wmp" mimeType="video/x-ms-wmp" />
         <mimeMap fileExtension=".wmv" mimeType="video/x-ms-wmv" />
         <mimeMap fileExtension=".wmx" mimeType="video/x-ms-wmx" />
         <mimeMap fileExtension=".wmz" mimeType="application/x-ms-wmz" />
         <mimeMap fileExtension=".woff" mimeType="font/x-woff" />
         <mimeMap fileExtension=".woff2" mimeType="application/font-woff2" />
         <mimeMap fileExtension=".wps" mimeType="application/vnd.ms-works" />
         <mimeMap fileExtension=".wri" mimeType="application/x-mswrite" />
         <mimeMap fileExtension=".wrl" mimeType="x-world/x-vrml" />
         <mimeMap fileExtension=".wrz" mimeType="x-world/x-vrml" />
         <mimeMap fileExtension=".wsdl" mimeType="text/xml" />
         <mimeMap fileExtension=".wtv" mimeType="video/x-ms-wtv" />
         <mimeMap fileExtension=".wvx" mimeType="video/x-ms-wvx" />
         <mimeMap fileExtension=".x" mimeType="application/directx" />
         <mimeMap fileExtension=".xaf" mimeType="x-world/x-vrml" />
         <mimeMap fileExtension=".xaml" mimeType="application/xaml+xml" />
         <mimeMap fileExtension=".xap" mimeType="application/x-silverlight-app" />
         <mimeMap fileExtension=".xbap" mimeType="application/x-ms-xbap" />
         <mimeMap fileExtension=".xbm" mimeType="image/x-xbitmap" />
         <mimeMap fileExtension=".xdr" mimeType="text/plain" />
         <mimeMap fileExtension=".xht" mimeType="application/xhtml+xml" />
         <mimeMap fileExtension=".xhtml" mimeType="application/xhtml+xml" />
         <mimeMap fileExtension=".xla" mimeType="application/vnd.ms-excel" />
         <mimeMap fileExtension=".xlam" mimeType="application/vnd.ms-excel.addin.macroEnabled.12" />
         <mimeMap fileExtension=".xlc" mimeType="application/vnd.ms-excel" />
         <mimeMap fileExtension=".xlm" mimeType="application/vnd.ms-excel" />
         <mimeMap fileExtension=".xls" mimeType="application/vnd.ms-excel" />
         <mimeMap fileExtension=".xlsb" mimeType="application/vnd.ms-excel.sheet.binary.macroEnabled.12" />
         <mimeMap fileExtension=".xlsm" mimeType="application/vnd.ms-excel.sheet.macroEnabled.12" />
         <mimeMap fileExtension=".xlsx" mimeType="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" />
         <mimeMap fileExtension=".xlt" mimeType="application/vnd.ms-excel" />
         <mimeMap fileExtension=".xltm" mimeType="application/vnd.ms-excel.template.macroEnabled.12" />
         <mimeMap fileExtension=".xltx" mimeType="application/vnd.openxmlformats-officedocument.spreadsheetml.template" />
         <mimeMap fileExtension=".xlw" mimeType="application/vnd.ms-excel" />
         <mimeMap fileExtension=".xml" mimeType="text/xml" />
         <mimeMap fileExtension=".xof" mimeType="x-world/x-vrml" />
         <mimeMap fileExtension=".xpm" mimeType="image/x-xpixmap" />
         <mimeMap fileExtension=".xps" mimeType="application/vnd.ms-xpsdocument" />
         <mimeMap fileExtension=".xsd" mimeType="text/xml" />
         <mimeMap fileExtension=".xsf" mimeType="text/xml" />
         <mimeMap fileExtension=".xsl" mimeType="text/xml" />
         <mimeMap fileExtension=".xslt" mimeType="text/xml" />
         <mimeMap fileExtension=".xsn" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".xtp" mimeType="application/octet-stream" />
         <mimeMap fileExtension=".xwd" mimeType="image/x-xwindowdump" />
         <mimeMap fileExtension=".z" mimeType="application/x-compress" />
         <mimeMap fileExtension=".zip" mimeType="application/x-zip-compressed" />
     </staticContent>

     <tracing>

         <traceFailedRequests />

         <traceProviderDefinitions>
             <add name="ASPNET" guid="{AFF081FE-0247-4275-9C4E-021F3DC1DA35}">
                 <areas>
                     <add name="Infrastructure" value="1" />
                     <add name="Module" value="2" />
                     <add name="Page" value="4" />
                     <add name="AppServices" value="8" />
                 </areas>
             </add>
             <add name="WWW Server" guid="{3a2a4e84-4c21-4981-ae10-3fda0d9b0f83}">
                 <areas>
                     <add name="Rewrite" value="1024" />
                 </areas>
             </add>
         </traceProviderDefinitions>

     </tracing>

     <urlCompression />

     <validation />
     <applicationInitialization />

 </system.webServer>
 <location path="" overrideMode="Allow">
     <system.webServer>

     <handlers accessPolicy="Read, Script">
             <add name="xamlx-ISAPI-4.0_64bit" path="*.xamlx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" />
             <add name="xamlx-ISAPI-4.0_32bit" path="*.xamlx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" />
             <add name="xamlx-Integrated-4.0" path="*.xamlx" verb="GET,HEAD,POST,DEBUG" type="System.Xaml.Hosting.XamlHttpHandlerFactory, System.Xaml.Hosting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="integratedMode,runtimeVersionv4.0" />
             <add name="rules-ISAPI-4.0_64bit" path="*.rules" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" />
             <add name="rules-ISAPI-4.0_32bit" path="*.rules" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" />
             <add name="rules-Integrated-4.0" path="*.rules" verb="*" type="System.ServiceModel.Activation.ServiceHttpHandlerFactory, System.ServiceModel.Activation, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="integratedMode,runtimeVersionv4.0" />
             <add name="xoml-ISAPI-4.0_64bit" path="*.xoml" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" />
             <add name="xoml-ISAPI-4.0_32bit" path="*.xoml" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" />
             <add name="xoml-Integrated-4.0" path="*.xoml" verb="*" type="System.ServiceModel.Activation.ServiceHttpHandlerFactory, System.ServiceModel.Activation, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="integratedMode,runtimeVersionv4.0" />
             <add name="svc-ISAPI-4.0_64bit" path="*.svc" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" />
             <add name="svc-ISAPI-4.0_32bit" path="*.svc" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" />
             <add name="svc-Integrated-4.0" path="*.svc" verb="*" type="System.ServiceModel.Activation.ServiceHttpHandlerFactory, System.ServiceModel.Activation, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="ISAPI-dll" path="*.dll" verb="*" modules="IsapiModule" resourceType="File" requireAccess="Execute" allowPathInfo="true" />
         <add name="AXD-ISAPI-4.0_64bit" path="*.axd" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="PageHandlerFactory-ISAPI-4.0_64bit" path="*.aspx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="SimpleHandlerFactory-ISAPI-4.0_64bit" path="*.ashx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="WebServiceHandlerFactory-ISAPI-4.0_64bit" path="*.asmx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-rem-ISAPI-4.0_64bit" path="*.rem" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-soap-ISAPI-4.0_64bit" path="*.soap" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="aspq-ISAPI-4.0_64bit" path="*.aspq" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="cshtm-ISAPI-4.0_64bit" path="*.cshtm" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="cshtml-ISAPI-4.0_64bit" path="*.cshtml" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="vbhtm-ISAPI-4.0_64bit" path="*.vbhtm" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="vbhtml-ISAPI-4.0_64bit" path="*.vbhtml" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="TraceHandler-Integrated-4.0" path="trace.axd" verb="GET,HEAD,POST,DEBUG" type="System.Web.Handlers.TraceHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="WebAdminHandler-Integrated-4.0" path="WebAdmin.axd" verb="GET,DEBUG" type="System.Web.Handlers.WebAdminHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="AssemblyResourceLoader-Integrated-4.0" path="WebResource.axd" verb="GET,DEBUG" type="System.Web.Handlers.AssemblyResourceLoader" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="PageHandlerFactory-Integrated-4.0" path="*.aspx" verb="GET,HEAD,POST,DEBUG" type="System.Web.UI.PageHandlerFactory" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="SimpleHandlerFactory-Integrated-4.0" path="*.ashx" verb="GET,HEAD,POST,DEBUG" type="System.Web.UI.SimpleHandlerFactory" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="WebServiceHandlerFactory-Integrated-4.0" path="*.asmx" verb="GET,HEAD,POST,DEBUG" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="HttpRemotingHandlerFactory-rem-Integrated-4.0" path="*.rem" verb="GET,HEAD,POST,DEBUG" type="System.Runtime.Remoting.Channels.Http.HttpRemotingHandlerFactory, System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="HttpRemotingHandlerFactory-soap-Integrated-4.0" path="*.soap" verb="GET,HEAD,POST,DEBUG" type="System.Runtime.Remoting.Channels.Http.HttpRemotingHandlerFactory, System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="aspq-Integrated-4.0" path="*.aspq" verb="GET,HEAD,POST,DEBUG" type="System.Web.HttpForbiddenHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="cshtm-Integrated-4.0" path="*.cshtm" verb="GET,HEAD,POST,DEBUG" type="System.Web.HttpForbiddenHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="cshtml-Integrated-4.0" path="*.cshtml" verb="GET,HEAD,POST,DEBUG" type="System.Web.HttpForbiddenHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="vbhtm-Integrated-4.0" path="*.vbhtm" verb="GET,HEAD,POST,DEBUG" type="System.Web.HttpForbiddenHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="vbhtml-Integrated-4.0" path="*.vbhtml" verb="GET,HEAD,POST,DEBUG" type="System.Web.HttpForbiddenHandler" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="ScriptHandlerFactoryAppServices-Integrated-4.0" path="*_AppService.axd" verb="*" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="ScriptResourceIntegrated-4.0" path="*ScriptResource.axd" verb="GET,HEAD" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" preCondition="integratedMode,runtimeVersionv4.0" />
         <add name="AXD-ISAPI-4.0_32bit" path="*.axd" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="PageHandlerFactory-ISAPI-4.0_32bit" path="*.aspx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="SimpleHandlerFactory-ISAPI-4.0_32bit" path="*.ashx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="WebServiceHandlerFactory-ISAPI-4.0_32bit" path="*.asmx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-rem-ISAPI-4.0_32bit" path="*.rem" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-soap-ISAPI-4.0_32bit" path="*.soap" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="aspq-ISAPI-4.0_32bit" path="*.aspq" verb="*" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="cshtm-ISAPI-4.0_32bit" path="*.cshtm" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="cshtml-ISAPI-4.0_32bit" path="*.cshtml" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="vbhtm-ISAPI-4.0_32bit" path="*.vbhtm" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="vbhtml-ISAPI-4.0_32bit" path="*.vbhtml" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="TraceHandler-Integrated" path="trace.axd" verb="GET,HEAD,POST,DEBUG" type="System.Web.Handlers.TraceHandler" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="WebAdminHandler-Integrated" path="WebAdmin.axd" verb="GET,DEBUG" type="System.Web.Handlers.WebAdminHandler" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="AssemblyResourceLoader-Integrated" path="WebResource.axd" verb="GET,DEBUG" type="System.Web.Handlers.AssemblyResourceLoader" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="PageHandlerFactory-Integrated" path="*.aspx" verb="GET,HEAD,POST,DEBUG" type="System.Web.UI.PageHandlerFactory" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="SimpleHandlerFactory-Integrated" path="*.ashx" verb="GET,HEAD,POST,DEBUG" type="System.Web.UI.SimpleHandlerFactory" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="WebServiceHandlerFactory-Integrated" path="*.asmx" verb="GET,HEAD,POST,DEBUG" type="System.Web.Services.Protocols.WebServiceHandlerFactory, System.Web.Services, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="HttpRemotingHandlerFactory-rem-Integrated" path="*.rem" verb="GET,HEAD,POST,DEBUG" type="System.Runtime.Remoting.Channels.Http.HttpRemotingHandlerFactory, System.Runtime.Remoting, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="HttpRemotingHandlerFactory-soap-Integrated" path="*.soap" verb="GET,HEAD,POST,DEBUG" type="System.Runtime.Remoting.Channels.Http.HttpRemotingHandlerFactory, System.Runtime.Remoting, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" preCondition="integratedMode,runtimeVersionv2.0" />
         <add name="AXD-ISAPI-2.0" path="*.axd" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness32" responseBufferLimit="0" />
         <add name="PageHandlerFactory-ISAPI-2.0" path="*.aspx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness32" responseBufferLimit="0" />
         <add name="SimpleHandlerFactory-ISAPI-2.0" path="*.ashx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness32" responseBufferLimit="0" />
         <add name="WebServiceHandlerFactory-ISAPI-2.0" path="*.asmx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness32" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-rem-ISAPI-2.0" path="*.rem" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness32" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-soap-ISAPI-2.0" path="*.soap" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness32" responseBufferLimit="0" />
         <add name="AXD-ISAPI-2.0-64" path="*.axd" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness64" responseBufferLimit="0" />
         <add name="PageHandlerFactory-ISAPI-2.0-64" path="*.aspx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness64" responseBufferLimit="0" />
         <add name="SimpleHandlerFactory-ISAPI-2.0-64" path="*.ashx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness64" responseBufferLimit="0" />
         <add name="WebServiceHandlerFactory-ISAPI-2.0-64" path="*.asmx" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness64" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-rem-ISAPI-2.0-64" path="*.rem" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness64" responseBufferLimit="0" />
         <add name="HttpRemotingHandlerFactory-soap-ISAPI-2.0-64" path="*.soap" verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv2.0,bitness64" responseBufferLimit="0" />
         <add name="TRACEVerbHandler" path="*" verb="TRACE" modules="ProtocolSupportModule" requireAccess="None" />
         <add name="OPTIONSVerbHandler" path="*" verb="OPTIONS" modules="ProtocolSupportModule" requireAccess="None" />
         <add name="ExtensionlessUrlHandler-ISAPI-4.0_32bit" path="*." verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness32" responseBufferLimit="0" />
         <add name="ExtensionlessUrlHandler-ISAPI-4.0_64bit" path="*." verb="GET,HEAD,POST,DEBUG" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" preCondition="classicMode,runtimeVersionv4.0,bitness64" responseBufferLimit="0" />
         <add name="ExtensionlessUrlHandler-Integrated-4.0" path="*." verb="GET,HEAD,POST,DEBUG" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0" responseBufferLimit="0" />
         <add name="StaticFile" path="*" verb="*" modules="StaticFileModule,DefaultDocumentModule,DirectoryListingModule" resourceType="Either" requireAccess="Read" />
     </handlers>

     <modules>
         <add name="IsapiFilterModule" lockItem="true" />
         <add name="BasicAuthenticationModule" lockItem="true" />
         <add name="IsapiModule" lockItem="true" />
         <add name="HttpLoggingModule" lockItem="true" />
         <add name="HttpCacheModule" lockItem="true" />
         <add name="StaticCompressionModule" lockItem="true" />
         <add name="DefaultDocumentModule" lockItem="true" />
         <add name="DirectoryListingModule" lockItem="true" />
         <add name="ProtocolSupportModule" lockItem="true" />
         <add name="StaticFileModule" lockItem="true" />
         <add name="AnonymousAuthenticationModule" lockItem="true" />
         <add name="RequestFilteringModule" lockItem="true" />
         <add name="CustomErrorModule" lockItem="true" />
         <add name="WindowsAuthenticationModule" lockItem="true" />
         <add name="UrlRoutingModule-4.0" type="System.Web.Routing.UrlRoutingModule" preCondition="managedHandler,runtimeVersionv4.0" />
         <add name="ScriptModule-4.0" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="managedHandler,runtimeVersionv4.0" />
         <add name="ApplicationInitializationModule" lockItem="true" />
         <add name="OutputCache" type="System.Web.Caching.OutputCacheModule" preCondition="managedHandler" />
         <add name="Session" type="System.Web.SessionState.SessionStateModule" preCondition="managedHandler" />
         <add name="WindowsAuthentication" type="System.Web.Security.WindowsAuthenticationModule" preCondition="managedHandler" />
         <add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" preCondition="managedHandler" />
         <add name="DefaultAuthentication" type="System.Web.Security.DefaultAuthenticationModule" preCondition="managedHandler" />
         <add name="RoleManager" type="System.Web.Security.RoleManagerModule" preCondition="managedHandler" />
         <add name="UrlAuthorization" type="System.Web.Security.UrlAuthorizationModule" preCondition="managedHandler" />
         <add name="FileAuthorization" type="System.Web.Security.FileAuthorizationModule" preCondition="managedHandler" />
         <add name="AnonymousIdentification" type="System.Web.Security.AnonymousIdentificationModule" preCondition="managedHandler" />
         <add name="Profile" type="System.Web.Profile.ProfileModule" preCondition="managedHandler" />
         <add name="UrlMappingsModule" type="System.Web.UrlMappingsModule" preCondition="managedHandler" />
             <add name="ConfigurationValidationModule" lockItem="true" />
             <add name="ServiceModel-4.0" type="System.ServiceModel.Activation.ServiceHttpModule, System.ServiceModel.Activation, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="managedHandler,runtimeVersionv4.0" />
             <add name="HttpRedirectionModule" lockItem="true" />
             <add name="RewriteModule" />
     </modules>
     </system.webServer>
 </location>
 <location path="Default Web Site">
     <system.webServer>
         <security>
             <access sslFlags="" />
         </security>
     </system.webServer>
 </location>
 <system.ftpServer>
     <providerDefinitions>
         <add name="IisManagerAuth" type="Microsoft.Web.FtpServer.Security.IisManagerAuthenticationProvider,Microsoft.Web.FtpServer,version=7.5.0.0,Culture=neutral,PublicKeyToken=31bf3856ad364e35" />
         <add name="AspNetAuth" type="Microsoft.Web.FtpServer.Security.AspNetFtpMembershipProvider,Microsoft.Web.FtpServer,version=7.5.0.0,Culture=neutral,PublicKeyToken=31bf3856ad364e35" />
     </providerDefinitions>
     <log>
     </log>
     <firewallSupport />
     <caching>
     </caching>
     <security>
         <ipSecurity />
         <requestFiltering>
             <hiddenSegments>
                 <add segment="_vti_bin" />
             </hiddenSegments>
         </requestFiltering>
         <authorization />
     </security>
 </system.ftpServer>

</configuration>





image.png (3.3 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MotoX80 avatar image
0 Votes"
MotoX80 answered

For what it's worth, I'll offer up some thoughts based on my IIS experience.

Let's start by doing what I'll call a "level set" because at this point, it's not clear to me what problem you are trying to solve. Please correct me where I am wrong and help all of us to understand your environment.

You have one server, correct? How many IP addresses does it have? Do you have 2 IP addresses, one for your local intranet and one that is exposed to the internet? Or do you just have one IP and internet based machines access the server thru a reverse proxy/firewall/NAT?

How many web sites are involved with this issue? In your image you show www.obama.com, but in the config it shows www.obama.work in the bindings. Both show an http binding for 20.0.0.8, so something can't be right.

100741-capture.jpg
100706-capture1.jpg



What are you trying to accomplish with www.obama.com and www.obama.work? If you are using HTTPS, you will need a certificate that matches the web site address. I think it would make more sense to use a generic certificate (*.obama.com) and use a web address of https://work.obama.com that would also process https://www.obama.com requests. Assuming that you want to have one web site process all of the requests.

If www.obama.com on every machine on the planet resolves to the same IP address, then everything should work as long as they have internet access. The machines on your private intranet will have an extra network hop because they won't go directly to the server, the network traffic will need to be routed out to the internet, and then back to your server.

You could eliminate that extra network hop on your private network machines by having www.obama.com resolve to the IP that your server uses for the intranet. That would also fix the problem where you have private network machines that do not have internet access. That would be the DNS split-brain solution that Dave posted. (Instead of creating a HOSTS file entry on every internal device.)


If you have 2 different web sites, one for external users that reference www.obama.com and another site for internal users who access www.obama.work, and you have 2 different certificates for each site, then that should work.



capture.jpg (19.7 KiB)
capture1.jpg (15.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 answered hrojas commented

@MotoX80 the problem is not that complicated to understand

This is part of my Windows server 2016:
IP 20.0.0.80 <-- is my intranet IP address and the hostname is obama.local (I don't have a certificate or a website on obama.local, Port 80 is not open to the internet)
IP 170.165.123.93 <-- is my external IP address and and has a certificate for website https://www.obama.com I have port 443 open to the internet

The internet can access https://www.obama.com without any problems
If I try to access www.obama.com or https://170.165.123.93:443 in the intranet I get an error: ERR_CONNECTION_RESET (This is the problem that I need to fix)

@ CandyLuo-MSFT told me "DNS entries just used to resolve domain name to an IP address. First make sure you can access the website by IP address in the LAN. If you are not able to access the website by IP, then this issue is not related with DNS resolution."

I need to resolve the LAN before I work with DNS.

Your suggestion of having 2 certificates. One assign to IP 170.165.123.93:443 and the other certificate assign to IP 20.0.0.80:80 may work?


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Are you using the obama name to hide your real web site name? It does not resolve to 170.165.123.93.

 PS C:\> nslookup www.obama.com
 Non-authoritative answer:
 Name:    obama.com
 Address:  184.168.131.241
 Aliases:  www.obama.com
    
 PS C:\> nslookup 170.165.123.93
 *** Wireless_Broadband_Router.home can't find 170.165.123.93: Non-existent domain


https://www.whois.com/whois/170.165.123.93



0 Votes 0 ·

It's common for some broadband routers to have problem when intranet users try to access public IP of the same router.

Split brain DNS deployment that DSPatrick suggested should solve your problem.

Just make sure in your "internal view", www.obama.com is resolved to 20.0.0.80 and your problem should go away.

Also make sure your IIS binding is like the following:

HTTPS 170.165.123.93 www.obama.com
HTTPS 20.0.0.80 <no need to assign host name for this record>

0 Votes 0 ·

@cheong00 My IIS was not configured the way you suggested.

Are you suggesting that I have HTTPS 2 times assigned to different IP's?

0 Votes 0 ·
TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 answered MotoX80 commented

@MotoX80 yes that is correct. and the IP address is not the one I use.
I am still fixing TLS 1.1 problems so I don't want to expose my server.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

On an intranet machine, run Powershell and try to connect. Does the remoteaddress resolve to to the internal or external IP? Then try with the IP addresses.

 PS C:\> Test-NetConnection www.obama.com -Port 443
    
    
 ComputerName     : www.obama.com
 RemoteAddress    : 184.168.131.241
 RemotePort       : 443
 InterfaceAlias   : Wi-Fi
 SourceAddress    : 192.168.1.80
 TcpTestSucceeded : True

Then check your IIS log files and see if IIS sees the connections. Default location is C:\inetpub\logs\LogFiles

Also check your HTTP error logs. C:\Windows\System32\LogFiles\HTTPERR

Does RDP and SMB work from the internal machines?

0 Votes 0 ·
TiaRojas-5756 avatar image
0 Votes"
TiaRojas-5756 answered MotoX80 commented

@MotoX80
I am getting errors on the 2 logs. This is a problem that I need to look close. This machine has one NIC and looks like I may need to configure for 2 NICs


Test-NetConnection www.obama.work -Port 443
WARNING: TCP connect to www.obama.com:443 failed


ComputerName : www.obama.work
RemoteAddress : 170.165.123.93
RemotePort : 443
InterfaceAlias : Ethernet 2
SourceAddress : 20.0.0.80
PingSucceeded : True
PingReplyDetails (RTT) : 0 ms
TcpTestSucceeded : False

is not working and I am getting errors in the logs
the HTTERR log:

Software: Microsoft HTTP API 2.0

Version: 1.0

Date: 2021-05-07 09:13:15

Fields: date time c-ip c-port s-ip s-port cs-version cs-method cs-uri streamid sc-status s-siteid s-reason s-queuename

2021-05-07 09:13:15 10.0.0.1 55256 20.0.0.80 443 HTTP/1.1 GET / - 404 - NotFound -



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I am not a networking expert. All of the internet facing web servers that I have ever dealt with were sitting in a DMZ behind firewalls and content switches. The only IP's that were defined were for the DMZ subnet. Our security team did not allow a server sitting on our private network to be directly accessed from the internet. That was considered too high of a security risk.

https://www.bing.com/search?q=windows%20nic%20ip%202%20different%20networks

If you are getting a 404 in the HTTPERR log, then IIS likely doesn't know which web site to route the request to. Try removing the host name on the HTTPS/443 binding.

0 Votes 0 ·
hrojas avatar image
0 Votes"
hrojas answered MotoX80 commented

@MotoX80 I only have on NIC on my server. I am looking at the IIS to understand what is going on

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If you have an HTTPS site, the address that the user browses needs to match the certificate that you use and if you specify a host name in the binding then that also needs to match.

I can't speak to your VLAN setup, but if you have a client machine that's on 20.0.0.xxx, and you browse an internet based site at 170.165.123.93, if the web server that processes that site also has a second IP (on a single NIC ) on the 20.0.0.xxx network, then your server/router may decide to send the traffic back directly to 20.0.0.xxx address instead of going back out through the internet. I don't know what functionality your network can support. You might have to run a network trace.

0 Votes 0 ·
hrojas avatar image
0 Votes"
hrojas answered

I was able to fix this problem.

My C:\Windows\System32\drivers\etc\Host file has the intranet IP and the domain name: 20.0.0.80 www.obama.com
IIS binds the internet port 443 to port 80

The problem was in the FortiGate router. I was not pointing to the correct certificate.

One I fixed FortiGate my intranet and internet and working with the correct ports.

Thank you for your help.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.