Re: Frontpage 2000

From: Mike Lyman (mlyman87-security@attbi.com)
Date: 03/26/02 

Date: Mon, 25 Mar 2002 23:54:46 -0800
From: "Mike Lyman" <mlyman87-security@attbi.com>
To: focus-ms@securityfocus.com

on 3/25/2002 at 5:37 PM Jason Yates wrote:

>Using frontpage server extensions on a win2000 box, is there anyway to
>block or allow access to frontpage based on IP address. For instance,
>we need to block access to everyone except IP's in the 10.217.2 network
>block.

I'm not sure if you can do it and serve content on port 80 but you should be able to do it by creating a second web site running on a different port but serving up the same web root. Set the FrontPage extensions up on that site but not on the site running on port 80. Then using either IP filtering, IPSec filters or firewall/router filters restrict access to the instance running FrontPage.

I have set up the two web sites serving the same content on different ports with one site not using FrontPage extensions and one using them. IIRC, the site without the extensions was still able to use the server side FrontPage elements like the guest book features but not allowing authoring but I'm not sure since the whole system has long since been rebuilt and used for other purposes.

Mike Lyman
mlyman@west-point.org
pgp keyid 0xD7BBADAD