[1]禁用TRACE或TRACK方法，IIS可使用URLScan禁用

   下载http://www.iis.net/downloads/microsoft/urlscan

http://blog.csdn.net/leejin_521/article/details/42772589

http://www.cnblogs.com/stragon/archive/2014/04/25/3689899.html