IIS Server Security - II6 and restrictions by IP address

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2005 > II6 and restrictions by IP address





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author II6 and restrictions by IP address
Ricki_Ricardo

2005-01-14, 5:51 pm

Hello, I have a folder on a Win 2003/IIS 6 box that I wish to restrict access
to by IP address. I have made the changes in Directory Security of the
folder that I want restricted. For test reasons right now it is set to DENY
ALL with no exceptions. Unfortunately I can still access it from my machine
and any others I have tried. I have also tried grant all and specifically
deny my machine, and that also does not work. I did restart IIS once to see
if that made a difference, it did not. I have not rebooted the box though.
Gevogled

2005-01-14, 5:51 pm

Ricki_Ricardo schrieb:
> Hello, I have a folder on a Win 2003/IIS 6 box that I wish to restrict access
> to by IP address. I have made the changes in Directory Security of the
> folder that I want restricted. For test reasons right now it is set to DENY
> ALL with no exceptions. Unfortunately I can still access it from my machine
> and any others I have tried. I have also tried grant all and specifically
> deny my machine, and that also does not work. I did restart IIS once to see
> if that made a difference, it did not. I have not rebooted the box though.

¨
hello

have u set the restrictions in the IIS-AdminInterface?
because when u only set it up in ur explorer it wont work(only if
directaccess by network).
but if u want to be able to restrict the access from web u must set it
up in the IISadmin.
rightclick on the web(if u want restrict access on a full web) or click
into the web and select the folder u want to restrict access.
then go to "options" or so...i'v a german-system.
there must be "foldersecurity" or so.
there u can set the ip restrictions;)

best regards,
gevogled

Ricki_Ricardo

2005-01-14, 5:51 pm

Yes, I went into IIS Admin, right-clicked the folder
involved-->properties-->Directory Security Tab-->EDIT under Domain name and
IP address restrictions. I then applied it and closed out IIS Admin. When I
re-enter IIS admin, the restriction shows as there on both the folder and on
the test file in the folder. But I can still access it from the web.

Thanks,

Rick

"Gevogled" wrote:

> Ricki_Ricardo schrieb:
> ¨
> hello
>
> have u set the restrictions in the IIS-AdminInterface?
> because when u only set it up in ur explorer it wont work(only if
> directaccess by network).
> but if u want to be able to restrict the access from web u must set it
> up in the IISadmin.
> rightclick on the web(if u want restrict access on a full web) or click
> into the web and select the folder u want to restrict access.
> then go to "options" or so...i'v a german-system.
> there must be "foldersecurity" or so.
> there u can set the ip restrictions;)
>
> best regards,
> gevogled
>
>

Gevogled

2005-01-17, 5:55 pm

ok.
sorry when i tell u this and u know about.

if u check the "Grant Access" then default is all computers can access
the folder. only the pc's in the list r restricted.

when u say "Restrict Access" then all pc's r forbidden.
only the pc's in the list r allowed.

i'v tested on diffrent servers and diffrent webs and i can't reproduce
ur problem.

hope u find the problem.

best regards,
gevogled



Ricki_Ricardo schrieb:[vbcol=seagreen]
> Yes, I went into IIS Admin, right-clicked the folder
> involved-->properties-->Directory Security Tab-->EDIT under Domain name and
> IP address restrictions. I then applied it and closed out IIS Admin. When I
> re-enter IIS admin, the restriction shows as there on both the folder and on
> the test file in the folder. But I can still access it from the web.
>
> Thanks,
>
> Rick
>
> "Gevogled" wrote:
>
>
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com