|
Home > Archive > IIS Server Security > November 2004 > Only web viewable to the Internet
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Only web viewable to the Internet
|
|
| Vincent Jones 2004-11-18, 5:51 pm |
| My problem is this. I have a folder with all of my webpages in them
and you can view it through the web. BUT, if you type in the name of
other folder... like our demo folder you can view all of it's
contents. How can i make one folder visible to the Internet, while
still maintain the other demo folder visible to everyone only on our
intranet network.
sample of
http:\\someipaddress\webfolder\..... only this folder visible to
the internet.. and nothing else.,,,
http:\\someipaddress\demo\.... but this still visible to the
intranet network....
and any other folders... also visible to intranet network....
| |
| Miha Pihler 2004-11-18, 5:51 pm |
| Hi Vincent,
There are few things you can do:
* in your IIS right click on e.g. /demo folder and select Properties. Here
click on Directory Security and click on Edit button under "IP Address and
....". Enter IP addresses from where users are allowed to see the folder...
(be careful what it says -- granted or denied access!)
* use ACL (NTFS permissions) on /demo folder (or any folder beside
/webfolder). IIS will honor NTFS permissions and if IUSR account doesn't
have read or other permissions on /demo folder users will be prompted to
enter valid account to access the folder... (You will have to remove e.g.
Everyone Read also -- Everyone also applies to IUSR)
Personally I would go with ACLs...
I hope this helps.
Mike
"Vincent Jones" <vncntj@hotmail.com> wrote in message
news:ba2a2d30.0411180659.4b692de1@posting.google.com...
> My problem is this. I have a folder with all of my webpages in them
> and you can view it through the web. BUT, if you type in the name of
> other folder... like our demo folder you can view all of it's
> contents. How can i make one folder visible to the Internet, while
> still maintain the other demo folder visible to everyone only on our
> intranet network.
>
>
> sample of
> http:\\someipaddress\webfolder\..... only this folder visible to
> the internet.. and nothing else.,,,
> http:\\someipaddress\demo\.... but this still visible to the
> intranet network....
>
> and any other folders... also visible to intranet network....
| |
| Jeff Cochran 2004-11-18, 5:51 pm |
| On 18 Nov 2004 06:59:26 -0800, vncntj@hotmail.com (Vincent Jones)
wrote:
>My problem is this. I have a folder with all of my webpages in them
>and you can view it through the web. BUT, if you type in the name of
>other folder... like our demo folder you can view all of it's
>contents. How can i make one folder visible to the Internet, while
>still maintain the other demo folder visible to everyone only on our
>intranet network.
>
>
>sample of
>http:\\someipaddress\webfolder\..... only this folder visible to
>the internet.. and nothing else.,,,
>http:\\someipaddress\demo\.... but this still visible to the
>intranet network....
>
>and any other folders... also visible to intranet network....
Authentication, NTFS permissions, two separate sites, lots of
possibilities here depending on what you have available. Easiest
would be to have a site for internet content and a second for
intranet, then use IP restrictions, firewall settings or
addressing/netmasks to restrict access.
Jeff
|
|
|
|
|