September 2008 Entries
The October issue of TechNet Magazine is out on the website. Check out my IT Toolbox column here:
http://technet.microsoft.com/en-us/magazine/cc904180.aspx
In this issue I covered:
PortableApps.com
TeamViewer
End-to-End Network Security: Defense-in-Depth (book)
PCIDatabase.com
CCS Network Inventory
It is relatively easy to control access to the various HTTP request types (protocols) for your ASP.Net WebService.
Add something like this to the system.web section of your web.config:
<webServices>
<protocols>
<add name="HttpSoap"/>
<add name="HttpGet"/> <!-- Because this web service is all GET methods -->
<add name="HttpPostLocalhost"/> <!-- So you can test/POST locally -->
<remove name="Documentation"/> <!-- So the outside world can't see your methods documentation -->
<remove name="HttpPost"/> <!-- Remove general POSTs from the outside world -->
</protocols>
</webServices>
Of course you will want to tailor this to the needs of your own web service. :)