Solved

Blocking an IP address from accessing a Web server

Posted on 2002-03-07
6
132 Views
Last Modified: 2010-04-13
I have a dedicated server colocated across town, running IIS 5, SP 2.  I recently have noticed something very unusual in my IIS web logs, and I want to know if it is possible to block an IP address, or a range of IP addresses from accessing files on my server?  If so, how?
0
Comment
Question by:Kapusta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 12

Accepted Solution

by:
Housenet earned 50 total points
ID: 6849299
Hi
-In IIS click the properties of say default website (example)& go to the directory security tab.
-Click on the IP address & domain name restrictions.
-To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255. Using 255.255.255.0 would include and computer from 200.10.10.x.
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6849301
I meant to say "would include ANY computer from 200.10.10.x."
0
 

Author Comment

by:Kapusta
ID: 6849598
What if you wanted to block every IP from 202.96.0.0 to 202.96.255.255 ?  What subnet mask would I use?   What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 

Author Comment

by:Kapusta
ID: 6849602
>> To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255 <<

Why would I choose "group of computers" if I only want to deny ONE IP?
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6850620
What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
-That would be 202.0.0.0 mask 255.0.0.0
"Why would I choose "group of computers" if I only want to deny ONE IP? " You're right, choose single computer.. I forgot about that choice...
0
 

Author Comment

by:Kapusta
ID: 6852337
Any idea if one can bypass the Windows dialog and create an ASCII file containing the IPs that I wish to block? IOW, if I have 200 IPs that I want to block, it sure would be nice if there was a faster way to create the blacklist than to type each IP one by one into the dialog window.
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others.  This conference is aimed mainly at government agencies.  So it addresses the various compli…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question