Solved

How do I allow local machine access to IIS7 when IPv4 restrictions are enabled?

Posted on 2009-07-08
7
2,386 Views
Last Modified: 2012-05-07
Hi

This is driving me mad. I can restrict access to IIS7 websites for external IP addresses but I have no idea how to allow the local machine access. I get this error:

"HTTP Error 403.6 - Forbidden
The IP address from which you are browsing is not permitted to access the requested Web site."

I tried an allow rule :

127.0.0.1(255.255.255.255)
and
192.168.1.1(255.255.255.0)

This doesn't work. When I looked at the website log files I noticed the IPv6 address was being logged. Do I need to allow an IPv6 address access? IIS7 only seems to allow IPv4 restrictions.

Please help
Thanks
Andrew
0
Comment
Question by:j055
  • 4
  • 2
7 Comments
 
LVL 37

Expert Comment

by:meverest
Comment Utility
Hi,

what do you get when you resolve 'localhost' from the server console?

i.e. c:\>ping localhost

if you access from the local system to http://127.0.0.1 that should force it to connect from the ip4 loopback IP.

cheers.
0
 

Author Comment

by:j055
Comment Utility
Hi

I played around with it a bit more. I now have IIS to deny unspecified and allow a public IP. This seems to allow the local IP access too (which is what I want). It's a shame the documentation isn't clearer about this. Anyway, thanks for your help.

Cheers
Andrew
0
 
LVL 51

Expert Comment

by:tedbilly
Comment Utility
Have you tried setting the DisableLoopbackCheck value in the registry (search the web for the details)
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 51

Expert Comment

by:tedbilly
Comment Utility
You didn't respond with an answer regarding disabling the loopback check
0
 

Accepted Solution

by:
j055 earned 0 total points
Comment Utility
Hi

I didn't try changing the DisableLoopbackCheck. As I see it the real issue is that IIS7 doesn't allow you to set IPv6 addresses as restrictions using the IIS GUI. I found out that you can add IPv6 restrictions directly in the configuration file. I downloaded the IIS7 Administration Pack which provides a configuration editor UI.

http://www.iis.net/extensions/AdministrationPack

Thanks
Andrew
0
 
LVL 51

Expert Comment

by:tedbilly
Comment Utility
OK, then mark your last comment as the solution and the question will be closed without loss of points.   That will keep the moderators from being involved and lighten their load.
0
 
LVL 51

Expert Comment

by:tedbilly
Comment Utility
Note: The reason I don't want this deleted is because your answer is valid and might help someone else.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Here are the symptoms: You start receiving calls from users that one of your legacy web apps isn't coming up, so you log into your IIS 5 server to check it out.  When you pull up the services, you notice that the WWW Publishing service isn't runn…
Today I came across an interesting issue that had me pulling my hair out.  I was troubleshooting a new internal web site which uses integrated security instead of anonymous.  When browsing the site from my laptop, I was able to access it with no iss…
This video discusses moving either the default database or any database to a new volume.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now