Re: IP/Domain Name restriction with IIS

["Maxime Ducharme" <mducharme () cybergeneration com>]

Hello

this option works well

option on IIS site, Directory Security, under IP address
and domain name restriction, click Edit button

ensure the option "Denied access" is enable and that
no entry is in the list below

this site wont be accessible at all, IIS will return
and error 403.6 - Forbidden: IP address rejected
(this even works for localhost access, i.e. the server itself)

to enable access for a specific IP, enter the IP
in the list below the deny option

HTH

Maxime


----- Original Message ----- 
From: <cybercat13 () cox net>
To: <security-basics () securityfocus com>
Sent: Thursday, January 05, 2006 11:09 PM
Subject: IP/Domain Name restriction with IIS


> Can anyone tell me if IP/Domain Name restriction works on a system running
IIS 6 and Windows 2003 Server?  The system administrators I am working with
say it does not work.  The system domain name restrictions was tried on
block everyone from the website.
> Any comments would be greatly appreciated.
>
>
> --------------------------------------------------------------------------
-
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity
Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------