Simple Redirect doesn't work - Umbraco v7.4.1

[Chriztian Steinmeier]

Because my site is being hammered with request like this:

/panegui.asp?/SomeStupidOffer
/panegui.asp?/f=ioeur&d=kflkdf

I have set up a rule like this:

(By the way, that Created timestamp is way off; should read something like 23:28:31 to be more accurate)

But I keep getting the built-in 404 page (from IIS 8.5)

• I've already set the trySkipIisCustomErrors to true (it's false by default in 7.4.x which caught me by surprise).

Enabling Logging and Debug, I never see the actual incoming URL - and I get UrlTracker HttpModule | URL is an umbraco reserved path or url, ignore request in the logfile...

The panegui.asp page was a page that used to exist, which hackers had tampered with to return questionable content from other places on the 'net. In other words, the file doesn't exist, and no content has that name — nor is it listed in the umbracoReservedPaths/-Urls keys in Web.config

[Chriztian Steinmeier]

Arg... seconds after hitting the Create issue button, it dawned on me to test something: I tried requesting /panegui.aspx instead — redirected instantly.

So - it's actually just the .asp extension that Umbraco never gets to handle, right? Or is it the other way around (Umbraco sends it off to IIS without even looking at it?)

[Chriztian Steinmeier]

Adding the redirect in UrlRewriting.config solves this issue for me.

[Stefan Kip]

Thanks for the report! Adding a rule to the UrlRewriting.config is only a work-around, so I'm re-opening the issue.

[Chriztian Steinmeier]

Cool - thanks! 👍

[Chriztian Steinmeier]

💯 Awesome - works great!