|
Home > Archive > IIS Server Security > August 2005 > 403 error when accessing web page
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
403 error when accessing web page
|
|
| Donovan 2005-08-05, 5:53 pm |
| I have set an IP restriction on a virtual directory that allows only my
computer access. I set up the restriction through the IIS MMC by selecting
the properties for the virtual directory, selcting the Directory Security
tab, clicking Edit under "IP address and domain name restrictions", selecting
Denied access and then finally giving a single computer access (my computer)
via my IP address. When I try to browse to the page via IE I receive:
"You are not authorized to view this page ... HTTP Error 403.6 - Forbidden:
IP address of the client has been rejected. Internet Information Services
(IIS)"
If I set it to Grant access then anyone and everyone can get to it. As soon
as I set any kind of restriction (single computer, group, or domain) IIS
blocks everyone from access including those who should be excluded. Am I
missing something, or is this a known issue?
I am using Windows 2003 Server and IIS 6.0.
| |
| David Wang [Msft] 2005-08-06, 2:48 am |
| IP Restriction seems to be working for me when I configure it, and I have
not encountered any IPRestriction issues from users. I chose to Deny, added
in the IP of my computer, and it worked (my computer had access, another
computer got the 403.6).
I would start by verifying you are using the right DNS server to resolve IPs
by IIS as well as configuring the right IP addresses to apply the
restriction. What IP addresses are you using?
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Donovan" <Donovan@discussions.microsoft.com> wrote in message
news:4AE0F054-2E2D-46A5-8B41-261E7C13A074@microsoft.com...
I have set an IP restriction on a virtual directory that allows only my
computer access. I set up the restriction through the IIS MMC by selecting
the properties for the virtual directory, selcting the Directory Security
tab, clicking Edit under "IP address and domain name restrictions",
selecting
Denied access and then finally giving a single computer access (my computer)
via my IP address. When I try to browse to the page via IE I receive:
"You are not authorized to view this page ... HTTP Error 403.6 - Forbidden:
IP address of the client has been rejected. Internet Information Services
(IIS)"
If I set it to Grant access then anyone and everyone can get to it. As soon
as I set any kind of restriction (single computer, group, or domain) IIS
blocks everyone from access including those who should be excluded. Am I
missing something, or is this a known issue?
I am using Windows 2003 Server and IIS 6.0.
| |
| Donovan 2005-08-08, 5:54 pm |
| My server and the workstations that I am trying to allow access are all in
the same subnet (103.118.114.x, 255.255.255.128). When I click the DNS
lookup for my IP address it resolves quickly and correctly. I have tried
denying all except the exclusions and added my IP to the exclusion list
(130.118.114.016). I receive the 403.6 error when I do this. I have also
tried adding a group with the following settings (130.118.114.1,
255.255.255.128) and still receive the 403.6 error.
"David Wang [Msft]" wrote:
> IP Restriction seems to be working for me when I configure it, and I have
> not encountered any IPRestriction issues from users. I chose to Deny, added
> in the IP of my computer, and it worked (my computer had access, another
> computer got the 403.6).
>
> I would start by verifying you are using the right DNS server to resolve IPs
> by IIS as well as configuring the right IP addresses to apply the
> restriction. What IP addresses are you using?
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Donovan" <Donovan@discussions.microsoft.com> wrote in message
> news:4AE0F054-2E2D-46A5-8B41-261E7C13A074@microsoft.com...
> I have set an IP restriction on a virtual directory that allows only my
> computer access. I set up the restriction through the IIS MMC by selecting
> the properties for the virtual directory, selcting the Directory Security
> tab, clicking Edit under "IP address and domain name restrictions",
> selecting
> Denied access and then finally giving a single computer access (my computer)
> via my IP address. When I try to browse to the page via IE I receive:
>
> "You are not authorized to view this page ... HTTP Error 403.6 - Forbidden:
> IP address of the client has been rejected. Internet Information Services
> (IIS)"
>
> If I set it to Grant access then anyone and everyone can get to it. As soon
> as I set any kind of restriction (single computer, group, or domain) IIS
> blocks everyone from access including those who should be excluded. Am I
> missing something, or is this a known issue?
>
> I am using Windows 2003 Server and IIS 6.0.
>
>
>
| |
| David Wang [Msft] 2005-08-15, 2:48 am |
| Hmm. Well, I cannot reproduce that, and I really have no other suggestions
other than to ask you to try this on WS03SP1.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Donovan" <Donovan@discussions.microsoft.com> wrote in message
news:EA53306D-A2A9-4A9F-A8DA-677C512CD04A@microsoft.com...
My server and the workstations that I am trying to allow access are all in
the same subnet (103.118.114.x, 255.255.255.128). When I click the DNS
lookup for my IP address it resolves quickly and correctly. I have tried
denying all except the exclusions and added my IP to the exclusion list
(130.118.114.016). I receive the 403.6 error when I do this. I have also
tried adding a group with the following settings (130.118.114.1,
255.255.255.128) and still receive the 403.6 error.
"David Wang [Msft]" wrote:
> IP Restriction seems to be working for me when I configure it, and I have
> not encountered any IPRestriction issues from users. I chose to Deny,
added
> in the IP of my computer, and it worked (my computer had access, another
> computer got the 403.6).
>
> I would start by verifying you are using the right DNS server to resolve
IPs
> by IIS as well as configuring the right IP addresses to apply the
> restriction. What IP addresses are you using?
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Donovan" <Donovan@discussions.microsoft.com> wrote in message
> news:4AE0F054-2E2D-46A5-8B41-261E7C13A074@microsoft.com...
> I have set an IP restriction on a virtual directory that allows only my
> computer access. I set up the restriction through the IIS MMC by
selecting
> the properties for the virtual directory, selcting the Directory Security
> tab, clicking Edit under "IP address and domain name restrictions",
> selecting
> Denied access and then finally giving a single computer access (my
computer)
> via my IP address. When I try to browse to the page via IE I receive:
>
> "You are not authorized to view this page ... HTTP Error 403.6 -
Forbidden:
> IP address of the client has been rejected. Internet Information Services
> (IIS)"
>
> If I set it to Grant access then anyone and everyone can get to it. As
soon
> as I set any kind of restriction (single computer, group, or domain) IIS
> blocks everyone from access including those who should be excluded. Am I
> missing something, or is this a known issue?
>
> I am using Windows 2003 Server and IIS 6.0.
>
>
>
| |
| Chris Crowe [IIS MVP] 2005-08-15, 2:48 am |
| I assume your workstation is not the server?
If your workstation is the server and you connect via http://localhost
(which resolves to 127.0.0.1) then unless you allow this you will be denied.
Have you checked the IIS log files as it will display the IP Address that it
is denying requests to.
I could not reproduce your problem here on IIS 6
--
cheers
Chris
Chris Crowe [IIS MVP]
http://blog.crowe.co.nz
"Donovan" <Donovan@discussions.microsoft.com> wrote in message
news:EA53306D-A2A9-4A9F-A8DA-677C512CD04A@microsoft.com...[vbcol=seagreen]
> My server and the workstations that I am trying to allow access are all in
> the same subnet (103.118.114.x, 255.255.255.128). When I click the DNS
> lookup for my IP address it resolves quickly and correctly. I have tried
> denying all except the exclusions and added my IP to the exclusion list
> (130.118.114.016). I receive the 403.6 error when I do this. I have also
> tried adding a group with the following settings (130.118.114.1,
> 255.255.255.128) and still receive the 403.6 error.
>
> "David Wang [Msft]" wrote:
>
|
|
|
|
|