Solved

Blocking an IP address from accessing a Web server

Posted on 2002-03-07
6
126 Views
Last Modified: 2010-04-13
I have a dedicated server colocated across town, running IIS 5, SP 2.  I recently have noticed something very unusual in my IIS web logs, and I want to know if it is possible to block an IP address, or a range of IP addresses from accessing files on my server?  If so, how?
0
Comment
Question by:Kapusta
  • 3
  • 3
6 Comments
 
LVL 12

Accepted Solution

by:
Housenet earned 50 total points
ID: 6849299
Hi
-In IIS click the properties of say default website (example)& go to the directory security tab.
-Click on the IP address & domain name restrictions.
-To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255. Using 255.255.255.0 would include and computer from 200.10.10.x.
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6849301
I meant to say "would include ANY computer from 200.10.10.x."
0
 

Author Comment

by:Kapusta
ID: 6849598
What if you wanted to block every IP from 202.96.0.0 to 202.96.255.255 ?  What subnet mask would I use?   What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Author Comment

by:Kapusta
ID: 6849602
>> To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255 <<

Why would I choose "group of computers" if I only want to deny ONE IP?
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6850620
What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
-That would be 202.0.0.0 mask 255.0.0.0
"Why would I choose "group of computers" if I only want to deny ONE IP? " You're right, choose single computer.. I forgot about that choice...
0
 

Author Comment

by:Kapusta
ID: 6852337
Any idea if one can bypass the Windows dialog and create an ASCII file containing the IPs that I wish to block? IOW, if I have 200 IPs that I want to block, it sure would be nice if there was a faster way to create the blacklist than to type each IP one by one into the dialog window.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office Picture Manager was included in Office 2003, 2007, and 2010, but not in Office 2013. Users had hopes that it would be in Office 2016/Office 365, but it is not. Fortunately, the same zero-cost technique that works to install it with …
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now