all groups > iis security > may 2007 >
You're in the

iis security

group:

Grant/Deny access to a group of computers


Grant/Deny access to a group of computers Olafub
5/23/2007 6:13:02 PM
iis security:
I am trying to limit access to only a few computers.
Win 2003 IIS 6

I followed Article 166003
http://support.microsoft.com/default.aspx/kb/166003

Example:
(Class C Address with custom subnet mask)
Network ID: 200.200.200.128
Subnet Mask: 255.255.255.192
IP Addresses Effected: 200.200.200.128 to 200.200.200.191

However this does not work.
If I use anything other then 0 in the last octet of the subnet mask, all
computers except for 200.200.200.128 are blocked. If I use 0 then all
200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
200.200.200.191.

Thanks in advance
Olaf

Re: Grant/Deny access to a group of computers Bernard Cheah [MVP]
5/24/2007 12:00:00 AM
I don't get you. using .192 netmask - the valid host range is .129 to 190
..128 will be network id and 192 is the broadcast address.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

Re: Grant/Deny access to a group of computers Olafub
5/24/2007 7:04:01 AM
Thanks for the links. I'll take a look.

The IP's I used were just an example.

I'm trying to allow 10.18.53.53 thru 10.18.53.58 access.
So I've granted access to 10.18.53.53(255.255.255.251)

This does not work. So I end up using (255.255.255.0)
This allows 10.18.53.all which is not what I want.

Thanks
Olaf

[quoted text, click to view]
Re: Grant/Deny access to a group of computers Olafub
5/24/2007 7:10:02 AM
Thanks for the links, I'll take a look.

The ip's I used were just an example.

I'm trying to allow 10.18.53.53 thru 10.18.53.58.
I've set it up like this 10.18.53.53(255.255.255.250)
This is not allowing anyone but 10.18.53.53 access.
So I've changed it to (255.255.255.0) which allows 10.18.53.all

Thanks
Olaf

[quoted text, click to view]
Re: Grant/Deny access to a group of computers Bernard Cheah [MVP]
5/25/2007 12:00:00 AM
that's not a valid range.
if it is just 5 IP, key in one by one.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button