Solved

Blocking an IP address from accessing a Web server

Posted on 2002-03-07
6
131 Views
Last Modified: 2010-04-13
I have a dedicated server colocated across town, running IIS 5, SP 2.  I recently have noticed something very unusual in my IIS web logs, and I want to know if it is possible to block an IP address, or a range of IP addresses from accessing files on my server?  If so, how?
0
Comment
Question by:Kapusta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 12

Accepted Solution

by:
Housenet earned 50 total points
ID: 6849299
Hi
-In IIS click the properties of say default website (example)& go to the directory security tab.
-Click on the IP address & domain name restrictions.
-To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255. Using 255.255.255.0 would include and computer from 200.10.10.x.
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6849301
I meant to say "would include ANY computer from 200.10.10.x."
0
 

Author Comment

by:Kapusta
ID: 6849598
What if you wanted to block every IP from 202.96.0.0 to 202.96.255.255 ?  What subnet mask would I use?   What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Author Comment

by:Kapusta
ID: 6849602
>> To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255 <<

Why would I choose "group of computers" if I only want to deny ONE IP?
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6850620
What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
-That would be 202.0.0.0 mask 255.0.0.0
"Why would I choose "group of computers" if I only want to deny ONE IP? " You're right, choose single computer.. I forgot about that choice...
0
 

Author Comment

by:Kapusta
ID: 6852337
Any idea if one can bypass the Windows dialog and create an ASCII file containing the IPs that I wish to block? IOW, if I have 200 IPs that I want to block, it sure would be nice if there was a faster way to create the blacklist than to type each IP one by one into the dialog window.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
no desktop when login to windows server 2000 7 341
Remote Desktop Software 6 463
Update a root certificate 8 694
vCenter Converter Standalone 4.01 - Convert Old Server 2000 to VM 4 207
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Read the original post on Monitis Blog. Believe it or not, the most important thing about the website of your business is not what’s on it but how fast it loads. Yes, that’s right!    As you can see on this infographic (an oldie but goodie!), …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question