Trying to access IIS on our local SBS Server - getting message saying our IP address is not allowed..

I was accessing RWW (Remote Web Workspace) in the office from my home when I started getting access denied 2 days ago, with this message:

You are not authorized to view this page

The Web server you are attempting to reach has a list of IP addresses that are not allowed to access the Web site, and the IP address of your browsing computer is on this list.

Please try the following:
•Contact the Web site administrator if you believe you should be able to view this directory or page.

HTTP Error 403.6 - Forbidden: IP address of the client has been rejected.
Internet Information Services (IIS)


Technical Information (for support personnel)
•Go to Microsoft Product Support Services and perform a title search for the words HTTP and 403.
•Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Limiting Access by IP Address, IP Address Access Restrictions, and About Custom Error Messages.

Strangely, I also couldn't access yahoo from my home computer either. Has my home router been compromised somehow? And is doing something that has put my home IP address on a blacklist?

I'm the only person in my company/office and I certainly didn't make any changes recently on IIS, not least limiting any IP addresses.

Then strangely from *the office itself* I tried to access RWW as well, as an experiment, and I got the same message as above!!

This would indicate that there *is* a problem with my webserver too. Overloaded?

What are the chances that both home and work setup should go wrong at the same time???
zorba111Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dan McFaddenSystems EngineerCommented:
The IIS error response tells it all... the IP you are currently using is on a DENY list in the configuration of the website you are trying to access.

I would try this:
1. make a note of the current (blocked) IP of your router.
--- link:  http://whatismyipaddress.com/
2. reboot the router and check IP... maybe it will acquire a new IP
3. if new IP is gotten, try accessing your site hosted on IIS
4. do a blacklist search on the IP from step 1.
--- link:  http://whatismyipaddress.com/blacklist-check

My guess is that some addresses from your Internet provider have been reported for nefarious activity.

Dan
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
zorba111Author Commented:
Thanks Dan!

I couldn't try your suggestions from home because I couldn't even get onto Experts Exchange from home!
(which together with the yahoo denial, *does* suggest my home IP was on a blacklist).
This was even after a router reboot.

As for the access *from* the office, *via* RWW, *to* out office IIS.... well I have a hazy memory now that in the past this particular path didn't work, and I remember having to bring my laptop into work, connect using mobile internet (i.e. *not* the local office network) to test out RWW. So there must be something in RWW that prevents local access from the same LAN.... If my memory serves me.

The good news is that I could access RWW from home this morning. I didn't have time to test the other domains (google, experts exchange etc.). In between I rebooted the server that IIS runs on. I'm tending to think that maybe overloading the server had somehting to do with the IP denials. I remember in the past, when the server was busy, we had problems logging into RWW (but never with this "IP denied" error message).
0
zorba111Author Commented:
I'm going to try your suggestions tonight at home. Printing off your answer now in case I still can't access EE and/or yahoo
0
zorba111Author Commented:
I wasn't at home much since last weekend to check this but I was there last night.

From home:
I can still login to our server for RWW.
Can't access yahoo.
Can access experts-exchange HTTP, but when I try and login, can't access the HTTPS service.

I went through the steps you gave me Dan.

Rebooting the router *does* reset the last 2x parts of the IP address (c and d of a.b.c.d) so it is DHCP.

Changing the IP address does not change the access to the websites. (When RWW was blocked for the original reason above, rebooting didn't make the difference - the difference in getting access to RWW seems to have been rebooting the RWW server).

Next I checked the home IP addresses against blacklists.
The first one was blacklisted on 4 lists: b.barracudacentral.org, l2.apews.org, pbl.spamhaus.org, zen.spamhaus.org.
The second IP address was blacklisted on the same 4 lists.

(The http://whatismyipaddress.com/ is a nice tool and I will use it in the future. For example I was able to confirm that our RWW server IP is *not* on any blacklist).

Hmmm, my home PC is old - its running XP I think (and if it is, support and therefore patches ended last year - why is it still "updating" every night? hmmmm). Could be that this PC is compromised, combined with a broadband provider (TalkTalk) that is using IP ranges that include previously blacklisted IPs.

Well, the main thing is I can access RWW from home again.

I think there were a combination of factors here. Dan thanks for your contribution, armed me with tools and lines of enquiry for further investigation as and when issues arise.
0
zorba111Author Commented:
response didn't "fix" the problem (aspects of which have been resolved independently), but it does offer new tools and methodology for understanding more about this problem domain
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft IIS Web Server

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.