espocrm/web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>

    <system.webServer>
        <rewrite>
            <rules>
                <rule name="rule 1X" stopProcessing="true">
                    <match url="/?reset/?$"  />
                    <action type="Rewrite" url="reset.html"  appendQueryString="true" />
                </rule>
                <rule name="RequestBlocking1" stopProcessing="true">
                    <match url="/?data/config\.php$" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
                <rule name="RequestBlocking2" stopProcessing="true">
                    <match url="/?data/logs" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
                <rule name="RequestBlocking3" stopProcessing="true">
                    <match url="/?data/cache" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
                <rule name="RequestBlocking4" stopProcessing="true">
                    <match url="/?data/upload" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
                <rule name="RequestBlocking5" stopProcessing="true">
                    <match url="/?application" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
                <rule name="RequestBlocking6" stopProcessing="true">
                    <match url="/?custom" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
                <rule name="RequestBlocking7" stopProcessing="true">
                    <match url="/?vendor" />
                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
                </rule>
            </rules>
        </rewrite>

        <defaultDocument>
            <files>
                <clear />
                <add value="index.php" />
                <add value="index.html" />
            </files>
        </defaultDocument>
    </system.webServer>

</configuration>