CODEWITHSUNDEEP
iis-7
John J Smith
John J Smith

Reputation: 11941

IIS IP restrictions - Deny and Allow Precedence

Out of necessity (my hosting provider), I have to allow a range of IP addresses. Using IIS 7.5 IP Address and Domain Resrictions feature, I set up the deny all feature and then added my Allow entry with an appropriate ip address and subnet mask e.g. 192.168.106.1 and 255.255.255.0 so that the range allowed was 192.168.106.1 to 192.168.106.254. Then I wanted to deny one specific ip address within this range so I added a deny entry for 192.168.106.147. However, testing showed that I could still access my site using the .147 address. I thought that Deny entries might overrule Allow entries (for safety) but it would appear that Allow entries have precedence. Can anyone confirm this?

Upvotes: 1

Views: 4379

Answers (1)

Hariprasad
Hariprasad

Reputation: 3640

Can you try changing the order? i.e., give deny rule before accept rule.

Upvotes: 1

Related Questions