Solved

How do I allow local machine access to IIS7 when IPv4 restrictions are enabled?

Posted on 2009-07-08
7
2,395 Views
Last Modified: 2012-05-07
Hi

This is driving me mad. I can restrict access to IIS7 websites for external IP addresses but I have no idea how to allow the local machine access. I get this error:

"HTTP Error 403.6 - Forbidden
The IP address from which you are browsing is not permitted to access the requested Web site."

I tried an allow rule :

127.0.0.1(255.255.255.255)
and
192.168.1.1(255.255.255.0)

This doesn't work. When I looked at the website log files I noticed the IPv6 address was being logged. Do I need to allow an IPv6 address access? IIS7 only seems to allow IPv4 restrictions.

Please help
Thanks
Andrew
0
Comment
Question by:j055
  • 4
  • 2
7 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 24810060
Hi,

what do you get when you resolve 'localhost' from the server console?

i.e. c:\>ping localhost

if you access from the local system to http://127.0.0.1 that should force it to connect from the ip4 loopback IP.

cheers.
0
 

Author Comment

by:j055
ID: 24811466
Hi

I played around with it a bit more. I now have IIS to deny unspecified and allow a public IP. This seems to allow the local IP access too (which is what I want). It's a shame the documentation isn't clearer about this. Anyway, thanks for your help.

Cheers
Andrew
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 24821216
Have you tried setting the DisableLoopbackCheck value in the registry (search the web for the details)
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 25733298
You didn't respond with an answer regarding disabling the loopback check
0
 

Accepted Solution

by:
j055 earned 0 total points
ID: 25737619
Hi

I didn't try changing the DisableLoopbackCheck. As I see it the real issue is that IIS7 doesn't allow you to set IPv6 addresses as restrictions using the IIS GUI. I found out that you can add IPv6 restrictions directly in the configuration file. I downloaded the IIS7 Administration Pack which provides a configuration editor UI.

http://www.iis.net/extensions/AdministrationPack

Thanks
Andrew
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 25746489
OK, then mark your last comment as the solution and the question will be closed without loss of points.   That will keep the moderators from being involved and lighten their load.
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 25746494
Note: The reason I don't want this deleted is because your answer is valid and might help someone else.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Logparser is the smartest tool I have ever used in parsing IIS log files and there are many interesting things I wanted to share with everyone one of the  real-world  scenario from my current project. Let's get started with  scenario - How do w…
Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now