How to setup request filtering rules in IIS

1. Login to your VPS. > Open IIS Manager. Under Connections pane, click on VPS Name.
   
   

2.  After clicking VPS name, Open Request Filtering as shown in below image.
   
   
    
3.  After Open Request Filtering then Move to URL tab and click on Deny Sequence.
   
   
    
4. An Add Deny Sequence dialog box will appear, enter the URL sequence which you wish to block. For Example, if you wish to block the common SQL Injection term 'varchar', enter 'varchar' character sequence in the Deny Sequence box. When you wish to block entire directory access, give '..' as shown in below image.
   
   
    
5. Click OK.when anyone tries to enter any of the mentioned terms into your URL Sequence, they will receive the HTTP Error 404.5 – URL Sequence denied error message.