Solved

How do I allow local machine access to IIS7 when IPv4 restrictions are enabled?

Posted on 2009-07-08
7
2,461 Views
Last Modified: 2012-05-07
Hi

This is driving me mad. I can restrict access to IIS7 websites for external IP addresses but I have no idea how to allow the local machine access. I get this error:

"HTTP Error 403.6 - Forbidden
The IP address from which you are browsing is not permitted to access the requested Web site."

I tried an allow rule :

127.0.0.1(255.255.255.255)
and
192.168.1.1(255.255.255.0)

This doesn't work. When I looked at the website log files I noticed the IPv6 address was being logged. Do I need to allow an IPv6 address access? IIS7 only seems to allow IPv4 restrictions.

Please help
Thanks
Andrew
0
Comment
Question by:j055
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 24810060
Hi,

what do you get when you resolve 'localhost' from the server console?

i.e. c:\>ping localhost

if you access from the local system to http://127.0.0.1 that should force it to connect from the ip4 loopback IP.

cheers.
0
 

Author Comment

by:j055
ID: 24811466
Hi

I played around with it a bit more. I now have IIS to deny unspecified and allow a public IP. This seems to allow the local IP access too (which is what I want). It's a shame the documentation isn't clearer about this. Anyway, thanks for your help.

Cheers
Andrew
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 24821216
Have you tried setting the DisableLoopbackCheck value in the registry (search the web for the details)
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 25733298
You didn't respond with an answer regarding disabling the loopback check
0
 

Accepted Solution

by:
j055 earned 0 total points
ID: 25737619
Hi

I didn't try changing the DisableLoopbackCheck. As I see it the real issue is that IIS7 doesn't allow you to set IPv6 addresses as restrictions using the IIS GUI. I found out that you can add IPv6 restrictions directly in the configuration file. I downloaded the IIS7 Administration Pack which provides a configuration editor UI.

http://www.iis.net/extensions/AdministrationPack

Thanks
Andrew
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 25746489
OK, then mark your last comment as the solution and the question will be closed without loss of points.   That will keep the moderators from being involved and lighten their load.
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 25746494
Note: The reason I don't want this deleted is because your answer is valid and might help someone else.
0

Featured Post

Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here are the symptoms: You start receiving calls from users that one of your legacy web apps isn't coming up, so you log into your IIS 5 server to check it out.  When you pull up the services, you notice that the WWW Publishing service isn't runn…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question