Re: Granting IP Addresses in IIS

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 12/11/03


Date: Thu, 11 Dec 2003 07:15:09 -0500

First, if there is a firewall between the server and the clients, I would
want to do this filtering there instead, because IIS IP blocking only blocks
IIS ports on the server. A firewall gives better protection and control.

There is no subnet mask that would help you add those IP addresses very
well. [And by the way, the subnet mask used on the client computers is
different from the subnet mask you would be wanting to enter.] If there is
a way in IIS [or the firewall] to add a range of IP addresses, I would do
that.

If there is no way to do that, you could permit x.x.x.0 subnet mask
255.255.255.128, which should allow x.x.x.0 through x.x.x.127... and then
also add x.x.x.128 and x.x.x.129 as well.

If you wanted x.x.x.0 through x.x.x.255 to be able to access the site, then
that would be x.x.x.0 subnet mask 255.255.255.0

If you have a problem with x.x.x.0 through 9 to be able to access the web
site, then those might not be your ideal solution. Instead, to JUST allow
.10 through .129, you could use:

x.x.x.64 mask 255.255.255.192 [e.g. .64 through .127]
x.x.x.32 mask 255.255.255.224 [e.g. .32 through .63]
x.x.x.16 mask 255.255.255.240 [e.g. .16 through .31]
x.x.x.12 mask 255.255.255.252 [e.g. .12 through .15]
x.x.x.11
x.x.x.10
x.x.x.129
x.x.x.128

"skc" <anonymous@discussions.microsoft.com> wrote in message
news:090701c3bfc9$202938d0$a301280a@phx.gbl...
> Running Windows 2000 Server. I need to grant IP addresses
> from our client, as their IP addresses have changed. The
> client now has a IP range, and quite a few of them - I
> need help on how to enter them into the Granted list:
>
> E.g.
>
> Scope [x.x.x.0] Site_Name - x.x.x.10 - x.x.x.129
>
> Scope [x.x.y.0] Site_Name - x.x.y.10 - x.x.y.129
>
> etc....
>
> Do I need to get the subnet mask - or how do I find it
> out??
>
> Please help me. There are about 20 of these ranges, a
> list of two examples are given above.
>
> Thanks,
>
> skc



Relevant Pages

  • RE: 401.2 Errors
    ... the server name as their proxy server, ... really understand the point in deploying the Firewall Client to all clients. ... I had a look at the log file but it only seems to be ... recording access that the IIS Server itself goes through. ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect Computer Problem at 2 Customer Sites
    ... I understand this issue to be: the client ... please restart the IIS service. ... join the domain has got the valid IP address and DNS server address in the ... Microsoft Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with connect computer wizard
    ... You mentioned that you're using Anonymous access with Administrator ... Open ConnectComputer properties in IIS. ... And there is only the DNS server be configured on client ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS6 caching
    ... On the server side, IIS6 will cache static files in kernel mode response ... No. IIS compression was not enabled. ... >>>> a client site or proxy caching issue. ...
    (microsoft.public.inetserver.iis)
  • Re: [Probably Dumb Newbie] Question re WSE3 WSSecurityKerberos Sample
    ... Changed VS.NET Solution to use IIS instead of WebDev.WebServer.EXE. ... I can work with my Network Admins to find out the specifics of our Active ... Client and Service are in same SLN (after all, ... will require both client and server side to authenticate against the KDC( ...
    (microsoft.public.dotnet.framework.webservices.enhancements)