|
Home > Archive > IIS Server Security > June 2005 > IP address and domain name restrictions not available?.
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IP address and domain name restrictions not available?.
|
|
| PeterX 2005-06-02, 5:53 pm |
|
For some reason the feature "IP address and domain name restrictions"
is ghosted in my IIS settings. Any idea why it can be? Anything else
has to be activated first? I wanted to allow access only localhost and
one external IP address, because that's all I need and lately my server
has been under continuous attack. Thanks in advance.
| |
| PeterX 2005-06-02, 8:48 pm |
| OK. I read somewhere else in this newsgroup: "That option is only
available on the server OSes. If you are using Windows XP Pro, or
Windows 2000 Pro, that option will not be available."
Not good. Any other way to filter IP addresses and domains? Any third
party tool (free if possible)?
| |
| Karl Levinson, mvp 2005-06-02, 8:48 pm |
| The best way to do so is to use a firewall. Free software firewalls include
www.kerio.com, www.sygate.com, or www.zonealarm.com
It is possible to do this natively with just the Windows OS itself, either
by using IPSec rules, or [I think] by using the Windows XP firewall.
However, the former is not a very good firewall, if only because the logging
is severely lacking. The latter is good enough, but you can get additional
features with third party firewalls.
If you prefer firewall devices, low cost ones start with www.netgear.com or
www.linksys.com, under $100 US.
Whichever you use, be aware that Windows workstations have a limit of 10
maximum concurrent network connections. Since some web browsers can use two
or more connections at once, your web site may become inaccessible after
just five visitors or fewer. The only fix is to use a different OS.
Last, blocking individual attackers by IP address one by one probably won't
be very effective, if that was the plan here. Such IP restrictions are
better for restricting who CAN access your web site, and usually not as good
for restricting who on the Internet cannot get there.
"PeterX" <info@innerlab.com> wrote in message
news:1117754623.361948.36930@g47g2000cwa.googlegroups.com...
> OK. I read somewhere else in this newsgroup: "That option is only
> available on the server OSes. If you are using Windows XP Pro, or
> Windows 2000 Pro, that option will not be available."
>
> Not good. Any other way to filter IP addresses and domains? Any third
> party tool (free if possible)?
>
|
|
|
|
|