Block all except 1 IP in IIS 7

[Nick]

Hi there,

I would like to block every IP from some particular web content except from
the PC the server resides on. Unfortunately can't get a mask that works,

for example

If I add a deny rule for the content

IP Range (Mask), 0.0.0.0(0.0.0.0)

This blocks nothing.

If I explicitly block the IP I am testing from as a single computer it works
fine.

I can only presume my mask is incorrect, any ideas how to do this?

Cheers in advance.

Nick.

[Ken Schaefer]

Why can't you use "Deny All except the list below" and then add:

127.0.0.1

(or similar). Alternatively add the IP address of the server with netmask
255.255.255.255

Cheers
Ken

Post by Nick
Hi there,
I would like to block every IP from some particular web content except
from the PC the server resides on. Unfortunately can't get a mask that
works,
for example
If I add a deny rule for the content
IP Range (Mask), 0.0.0.0(0.0.0.0)
This blocks nothing.
If I explicitly block the IP I am testing from as a single computer it
works fine.
I can only presume my mask is incorrect, any ideas how to do this?
Cheers in advance.
Nick.

[Nick]

Because it's IIS 7 and I don't see that option anywhere, unless I'm looking
in the wrong place?

Bare in mind I only want to do this for 2 asmx files.

Nick.

Post by Ken Schaefer
127.0.0.1
(or similar). Alternatively add the IP address of the server with netmask
255.255.255.255
Cheers
Ken

Post by Nick
Hi there,
I would like to block every IP from some particular web content except
from the PC the server resides on. Unfortunately can't get a mask that
works,
for example
If I add a deny rule for the content
IP Range (Mask), 0.0.0.0(0.0.0.0)
This blocks nothing.
If I explicitly block the IP I am testing from as a single computer it
works fine.
I can only presume my mask is incorrect, any ideas how to do this?
Cheers in advance.
Nick.

[WenJun Zhang[msft]]

Hi Nick,

The best setting for your scenario should be:

1. Add an allow rule and specify the IP you want to grant access to the
site.

2. Click Edit Features Settings. Select Deny access for unspecified clients.


Please let me know if you have any further question on this.

Have a great day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
***@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/default.aspx?target=assistance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Nick]

aaaah! that's awesome!

Microsoft -10 for such a poorly located option

WenJun + 10 for being so helpful!

lol! :D

Post by WenJun Zhang[msft]
Hi Nick,
1. Add an allow rule and specify the IP you want to grant access to the
site.
2. Click Edit Features Settings. Select Deny access for unspecified clients.
Please let me know if you have any further question on this.
Have a great day.
Sincerely,
WenJun Zhang
Microsoft Online Community Support
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/default.aspx?target=assistance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[WenJun Zhang[msft]]

You are welcome Nick. Almost all the functionalities in IIS7 are
constructed into modules. Then we can conveniently add/remove
necessary/unnecessary modules to customize the web server for better
performance and security. In this case, the modules' UI design must also
follow a standard form. That's the reason why some options may not look so
intuitionistic...

Whenever you meet any problem on using IIS, please feel free to post here
again. We are always glad to be of assistance.

Have a great day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
***@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/default.aspx?target=assistance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.