SBS 2008 - IIS Remote Web Workplace - stop default redirect

[napoleon]

I am using SBS 2008 and currently if a user types http://remote.public.domain then the server redirects this url to https://remote.public.domain/remote to authenticate for remote web workplace. Can anyone tell me how to remove this automatic redirection so that the user is required to type https://remote.public.domain/remote to connect to remote web work place? In SBS 2003 we have removed this type of redirection because when people browsed to the public ip address, then they could see there was a logon portal. This was then subjected to continal attack. In SBS 2003 we replaced the default webpage with a plain html file and connected to remote workplace by directly typing the virtual path in the URL. After that the attack dropper from 100's to per day to none in 3 years. I have checked everywhere in IIS7, including the redirect options but can find nothing. Any ideas? thanks

[Soul Searching]

You can try to block http at the firewall and only forward https to the SBS server. I think that surely you dont have these on your lan right?

[zemeron]

Just make a backup of "C:\Program Files\Windows Small Business Server\Bin\WebApp\SBS Web Applications\web.config" and then open that file in notepad (launched with administrative rights) and remove the line:

<add name="HttptoHttpsRedir" type="Microsoft.WindowsServerSolutions.IWorker.IIS.Modules.HttpToHttpsRedir,HttpToHttpsRedir,Version =6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />

This kills the redirect module to /remote.