IIS Server Security - Grant/Deny access to a group of computers

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > May 2007 > Grant/Deny access to a group of computers





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Grant/Deny access to a group of computers
Olafub

2007-05-24, 1:16 am

I am trying to limit access to only a few computers.
Win 2003 IIS 6

I followed Article 166003
http://support.microsoft.com/default.aspx/kb/166003

Example:
(Class C Address with custom subnet mask)
Network ID: 200.200.200.128
Subnet Mask: 255.255.255.192
IP Addresses Effected: 200.200.200.128 to 200.200.200.191

However this does not work.
If I use anything other then 0 in the last octet of the subnet mask, all
computers except for 200.200.200.128 are blocked. If I use 0 then all
200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
200.200.200.191.

Thanks in advance
Olaf


Bernard Cheah [MVP]

2007-05-24, 1:16 am

I don't get you. using .192 netmask - the valid host range is .129 to 190
..128 will be network id and 192 is the broadcast address.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Olafub" <Olafub@discussions.microsoft.com> wrote in message
news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
>I am trying to limit access to only a few computers.
> Win 2003 IIS 6
>
> I followed Article 166003
> http://support.microsoft.com/default.aspx/kb/166003
>
> Example:
> (Class C Address with custom subnet mask)
> Network ID: 200.200.200.128
> Subnet Mask: 255.255.255.192
> IP Addresses Effected: 200.200.200.128 to 200.200.200.191
>
> However this does not work.
> If I use anything other then 0 in the last octet of the subnet mask, all
> computers except for 200.200.200.128 are blocked. If I use 0 then all
> 200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
> 200.200.200.191.
>
> Thanks in advance
> Olaf
>
>



Olafub

2007-05-24, 1:17 pm

Thanks for the links. I'll take a look.

The IP's I used were just an example.

I'm trying to allow 10.18.53.53 thru 10.18.53.58 access.
So I've granted access to 10.18.53.53(255.255.255.251)

This does not work. So I end up using (255.255.255.0)
This allows 10.18.53.all which is not what I want.

Thanks
Olaf

"Bernard Cheah [MVP]" wrote:

> I don't get you. using .192 netmask - the valid host range is .129 to 190
> ..128 will be network id and 192 is the broadcast address.
>
> --
> Regards,
> Bernard Cheah
> http://www.iis.net/
> http://www.iis-resources.com/
> http://msmvps.com/blogs/bernard/
>
>
> "Olafub" <Olafub@discussions.microsoft.com> wrote in message
> news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
>
>
>

Olafub

2007-05-24, 1:18 pm

Thanks for the links, I'll take a look.

The ip's I used were just an example.

I'm trying to allow 10.18.53.53 thru 10.18.53.58.
I've set it up like this 10.18.53.53(255.255.255.250)
This is not allowing anyone but 10.18.53.53 access.
So I've changed it to (255.255.255.0) which allows 10.18.53.all

Thanks
Olaf

"Bernard Cheah [MVP]" wrote:

> I don't get you. using .192 netmask - the valid host range is .129 to 190
> ..128 will be network id and 192 is the broadcast address.
>
> --
> Regards,
> Bernard Cheah
> http://www.iis.net/
> http://www.iis-resources.com/
> http://msmvps.com/blogs/bernard/
>
>
> "Olafub" <Olafub@discussions.microsoft.com> wrote in message
> news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
>
>
>

Bernard Cheah [MVP]

2007-05-25, 7:16 am

that's not a valid range.
if it is just 5 IP, key in one by one.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Olafub" <Olafub@discussions.microsoft.com> wrote in message
news:891ACEA0-AC14-4B1A-86AD-600CA6AF4B12@microsoft.com...[vbcol=seagreen]
> Thanks for the links, I'll take a look.
>
> The ip's I used were just an example.
>
> I'm trying to allow 10.18.53.53 thru 10.18.53.58.
> I've set it up like this 10.18.53.53(255.255.255.250)
> This is not allowing anyone but 10.18.53.53 access.
> So I've changed it to (255.255.255.0) which allows 10.18.53.all
>
> Thanks
> Olaf
>
> "Bernard Cheah [MVP]" wrote:
>


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com