Security Basics mailing list archives
Re: IP/Domain Name restriction with IIS
From: Gremlin <cybercat13 () cox net>
Date: Sat, 07 Jan 2006 01:08:49 -0500
Accoording to my system administrator's when they tried to apply Domain Name restritions to a website it blocked all internet access to that website. The system administrator's have found no way to limit access to a website by either IP or Domain name restriction that works. What I am looking for is third party confirmation one way or the other.
Roger A. Grimes wrote:
Describe what "does not work" means. It works as designed. Are your admins reporting an easy way to get around them, or something like that? Roger ********************************************************************Roger A. Grimes, Banneret Computer Security, Consultant *CPA, CISSP, MCSE: Security (2000/2003/MVP), CEH, yada...yada...*email: roger () banneretcs com *Author of Honeypots for Windows (Apress) *http://www.apress.com/book/bookDisplay.html?bID=281 ******************************************************************* -----Original Message-----From: cybercat13 () cox net [mailto:cybercat13 () cox net] Sent: Thursday, January 05, 2006 11:10 PMTo: security-basics () securityfocus com Subject: IP/Domain Name restriction with IIS Can anyone tell me if IP/Domain Name restriction works on a system running IIS 6 and Windows 2003 Server? The system administrators I am working with say it does not work. The system domain name restrictionswas tried on block everyone from the website. Any comments would be greatly appreciated.------------------------------------------------------------------------ --- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education andthe case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degreecustomizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ------------------------------------------------------------------------ ----
--------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINEThe Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus ----------------------------------------------------------------------------
Current thread:
- IP/Domain Name restriction with IIS cybercat13 (Jan 06)
- Re: IP/Domain Name restriction with IIS Maxime Ducharme (Jan 09)
- <Possible follow-ups>
- RE: IP/Domain Name restriction with IIS Roger A. Grimes (Jan 09)
- Re: IP/Domain Name restriction with IIS Gremlin (Jan 09)