?
Solved

Blocking an IP address from accessing a Web server

Posted on 2002-03-07
6
Medium Priority
?
134 Views
Last Modified: 2010-04-13
I have a dedicated server colocated across town, running IIS 5, SP 2.  I recently have noticed something very unusual in my IIS web logs, and I want to know if it is possible to block an IP address, or a range of IP addresses from accessing files on my server?  If so, how?
0
Comment
Question by:Kapusta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 12

Accepted Solution

by:
Housenet earned 200 total points
ID: 6849299
Hi
-In IIS click the properties of say default website (example)& go to the directory security tab.
-Click on the IP address & domain name restrictions.
-To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255. Using 255.255.255.0 would include and computer from 200.10.10.x.
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6849301
I meant to say "would include ANY computer from 200.10.10.x."
0
 

Author Comment

by:Kapusta
ID: 6849598
What if you wanted to block every IP from 202.96.0.0 to 202.96.255.255 ?  What subnet mask would I use?   What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:Kapusta
ID: 6849602
>> To add single ip to be denied choose "group of computers" and add say 200.10.10.10 255.255.255.255 <<

Why would I choose "group of computers" if I only want to deny ONE IP?
0
 
LVL 12

Expert Comment

by:Housenet
ID: 6850620
What if I wanted to block 202.0.0.0 to 202.255.255.255 ?
-That would be 202.0.0.0 mask 255.0.0.0
"Why would I choose "group of computers" if I only want to deny ONE IP? " You're right, choose single computer.. I forgot about that choice...
0
 

Author Comment

by:Kapusta
ID: 6852337
Any idea if one can bypass the Windows dialog and create an ASCII file containing the IPs that I wish to block? IOW, if I have 200 IPs that I want to block, it sure would be nice if there was a faster way to create the blacklist than to type each IP one by one into the dialog window.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This is a fine trick which I've found useful many times, when you just don't want to accidentally run a batch script or the commands needs administrator rights.
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question