|
Home > Archive > IIS Server Security > August 2005 > IIS
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Bhavesh Valand 2005-08-13, 5:50 pm |
| Hello Expert
I have hosted my web-site on the my server that having two network card, one
connected to WAN and other connected LAN.
Under IIS Manager created website its IP address is all unassigned so i
should be able to view my web site from any location even from home.
I tried to access the website from laptop @ home (http://xx.xx.xx.123), it
gives me error message HTTP 403 (forbidden) You are not authorized to view
this page
When i try to access the web page from a workstation @ work it loads
perfectly.
Don't understand wht is the problem ...
Thanks
Bhavesh
| |
| Chris Crowe [IIS MVP] 2005-08-13, 8:48 pm |
| Check the directory security settings for the web site, you may have NTLM
authentication only and no Anonymous access.
Open Internet Information Services Manager in Control Panel / Administrative
tools
Select your web site
right click goto properties
select the directory security tab
Click on the edit button
Make sure anonymous access is enabled
--
cheers
Chris
Chris Crowe [IIS MVP]
http://blog.crowe.co.nz
"Bhavesh Valand" <brvaland@yahoo.com> wrote in message
news:OkpcB$CoFHA.1148@TK2MSFTNGP12.phx.gbl...
> Hello Expert
>
> I have hosted my web-site on the my server that having two network card,
> one connected to WAN and other connected LAN.
>
> Under IIS Manager created website its IP address is all unassigned so i
> should be able to view my web site from any location even from home.
>
> I tried to access the website from laptop @ home (http://xx.xx.xx.123), it
> gives me error message HTTP 403 (forbidden) You are not authorized to view
> this page
>
> When i try to access the web page from a workstation @ work it loads
> perfectly.
>
> Don't understand wht is the problem ...
>
> Thanks
> Bhavesh
>
>
>
| |
| David Wang [Msft] 2005-08-14, 2:48 am |
| Can you turn off IE's "Show Friendly HTTP Errors" and report the actual 403
error response that is returned?
I presume this server is at work.
My guess right now is that you have IP Restriction set on the IIS website
such that it denies access to non-work IP addresses. It obviously would
apply regardless of the WAN or LAN network interface since you route both
sets of IP to the same website.
This is easy to solve when you report the actual 403 error that you are
getting.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Bhavesh Valand" <brvaland@yahoo.com> wrote in message
news:OkpcB$CoFHA.1148@TK2MSFTNGP12.phx.gbl...
Hello Expert
I have hosted my web-site on the my server that having two network card, one
connected to WAN and other connected LAN.
Under IIS Manager created website its IP address is all unassigned so i
should be able to view my web site from any location even from home.
I tried to access the website from laptop @ home (http://xx.xx.xx.123), it
gives me error message HTTP 403 (forbidden) You are not authorized to view
this page
When i try to access the web page from a workstation @ work it loads
perfectly.
Don't understand wht is the problem ...
Thanks
Bhavesh
| |
| Bhavesh Valand 2005-08-14, 7:49 am |
| Hi,
The Anonymous access on the directory security is enabled.
Under IP Address and domain name restriction, currently it is setup for
By default, all computers will be : Granted access
Actual error message after switching off "Show friendly HTTP Error
Message", the error message is this :
Directory Listing Denied
The Virtual Directory does not allow contents to be listed.
Let me know if i need to check any other security on web server.
Regards
Bhavesh
*** Sent via Developersdex http://www.codecomments.com ***
| |
| David Wang [Msft] 2005-08-14, 5:55 pm |
| That error means that you made a request for a URL that ends with a / (hence
telling IIS to look up a default document to serve back), but you did not
have a file that matches the defined Default Document at that URL.
In other words, if you made a request to http://1.2.3.4/vdir/ and that vdir
defined Default.htm and default.asp as default documents, you did not have
default.htm nor default.asp at the physical directory corresponding to /vdir
This should reproduce regardless whether you are accessing the URL from home
or at work, so you have something else going on here. What you describe is
not possible with a single IIS website definition which includes both the
LAN and WAN IPs.
So, you either have two websites, one bound to LAN IP and the other to WAN
IP, or networking is wrong where you are somehow not accessing the same
machine when requesting the LAN or WAN IP. In either case, the problem has
nothing to do with permissions and everything to do with user
misconfiguration.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Bhavesh Valand" <brvaland@yahoo.com> wrote in message
news:e$hiF3KoFHA.3760@TK2MSFTNGP15.phx.gbl...
Hi,
The Anonymous access on the directory security is enabled.
Under IP Address and domain name restriction, currently it is setup for
By default, all computers will be : Granted access
Actual error message after switching off "Show friendly HTTP Error
Message", the error message is this :
Directory Listing Denied
The Virtual Directory does not allow contents to be listed.
Let me know if i need to check any other security on web server.
Regards
Bhavesh
*** Sent via Developersdex http://www.codecomments.com ***
| |
| Bhavesh Valand 2005-08-15, 5:53 pm |
| Hi David,
Thanks for your reply, i checked on IIS currently i have 4 web site
created on the server.
The web and its properties :
Default Web site (local ip address 192.168.xx.xx) Port:64479
Client upload (*All Unassigned*) Port:64479
Microsoft Sharepoint Administration (*All Unassigned*) Port:5351
GIW (*All Unassigned*) Port:80 *Stopped
Telebank (*All Unassigned*) Port:80
Would be able guide me through the configuration and where i'm probably
going wrong.
Regards
Bhavesh
*** Sent via Developersdex http://www.codecomments.com ***
| |
| David Wang [Msft] 2005-08-15, 5:53 pm |
| I have no idea what website you are having problems accessing from home and
at work nor what URL, so I cannot give any more specific help.
I am guessing it is between the two websites bound to port 64479 because
depending on IP used (any host headers), you could be going between either
website with their different configuration. At home, you would only access
"Client upload" website while at work, you could be accessing "Default Web
site" -- all depends on your networking configuration as to which website a
given URL maps to.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Bhavesh Valand" <brvaland@yahoo.com> wrote in message
news:uTsKp2coFHA.3656@TK2MSFTNGP09.phx.gbl...
Hi David,
Thanks for your reply, i checked on IIS currently i have 4 web site
created on the server.
The web and its properties :
Default Web site (local ip address 192.168.xx.xx) Port:64479
Client upload (*All Unassigned*) Port:64479
Microsoft Sharepoint Administration (*All Unassigned*) Port:5351
GIW (*All Unassigned*) Port:80 *Stopped
Telebank (*All Unassigned*) Port:80
Would be able guide me through the configuration and where i'm probably
going wrong.
Regards
Bhavesh
*** Sent via Developersdex http://www.codecomments.com ***
|
|
|
|
|