Configure IPv4 Address Restrictions for Remote Connections (IIS 7)

Applies To: Windows Server 2008, Windows Server 2008 R2

Configure IPv4 address restrictions to specify whether a specific IPv4 address or range of IPv4 addresses are allowed or denied permission to connect remotely to sites or applications on the Web server. For example, if the management service is experiencing a denial-of-service (DOS) attack or an unauthorized attempt to access the service, you can deny remote connections from the specific IP addresses from where the attacks originate.

Note

Only server administrators who are using IIS Manager on the local computer can configure the management service in IIS 7.

Prerequisites

For information about the levels at which you can perform this procedure, and the modules, handlers, and permissions that are required for this procedure, see Management Service Feature Requirements (IIS 7).

Exceptions to feature requirements

  • None

To configure an IPv4 address restriction for the management service

  1. Open IIS Manager. For information about opening IIS Manager, see Open IIS Manager (IIS 7).

  2. In the Connections pane, click the server node in the tree.

  3. In Features View, double-click Management Service.

  4. On the Management Service page, in the Actions pane, click Stop to stop the management service.

  5. Select the Enable remote connections box.

  6. Under IPv4 Address Restrictions, use one of the following procedures:

    • Click Allow to allow an IPv4 address or range of IPv4 addresses to connect to the management service.

    • Click Deny to deny an IPv4 address or range of IPv4 addresses from connecting to the management service.

  7. In the Add Allow Connection Rule dialog box or Add Deny Connection Rule dialog box, use one of the following procedures, and then click OK:

    • To allow or deny a specific IP address, click Specific IPv4 address, and then type the IPv4 address in the box.

    • To allow or deny a range of IP addresses, click IPv4 address range, type an IPv4 address in the box, and then type a subnet mask in the Subnet mask box.

  8. In the Actions pane, click Apply and then click Start.

See Also

Concepts

Configuring Remote Management (IIS 7)