Link to home
Start Free TrialLog in
Avatar of amir ali
amir ali

asked on

iis 7 - IP Addresses and Domain Restrictions Domain Restrictions Not Working!!!

hi
1- we have a domain in intranet and some web application . i   wanna that only domain client access to web app
2- set domain restriction in iis 7 and deny all and then allow  domain as this   "my domain.com" but not working
3- otherwise it working with  ip addresses  that i no want it .
4- pls help me have to implement this  project.
tnx
Avatar of Dan McFadden
Dan McFadden
Flag of United States of America image

To allow of deny access to as website in IIS by domain name, you must enable the setting that allows for DNS lookups to occur for the inbound request.

1. In IIS Manager, select the site you want to control access by domain name.
2. Select the IP Address and Domain Restrictions feature
3. In the right side Actions panel, click the "Edit feature settings" option
4. In the drop-down, select the DENY option for "Access for unspecified client access"
*** this blocks all undefined clients from the site.
5. Check the box labeled "Enable domain name restrictions" and click OK
6. In the action panel, click "Add Allow entry" and type in the name of the domain that you want to allow into the site.

Reference link:  https://technet.microsoft.com/en-us/library/cc733090(v=ws.10).aspx

Disclaimer:  using this feature in this way (allow/deny by domain name) will negatively impact the performance of your website because for each inbound http/https request, the web server must do a DNS lookup to determine if the FQDN of the client matches the Allow rule defined for access to the site.

Dan
Any feedback for this question?

Dan
Avatar of amir ali
amir ali

ASKER

not  work !!
Can you post screen shots of the "IP Addresses and Domain Restrictions" configuration.  I would like to see how you have it set up.

I have used this functionality in the past.

Also, can you post some http logs files that show activity from addresses that are unwanted?

Dan
Any additional info for this question?

Dan
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.