Blocking IP address range using IIS 6.0

Hi,

I am trying to block an IP address range using IIS 6.0 on W2K3 Server. I right click the web site, choose Properties, choose the Directory Security tab, and then Edit under IP Address restrictions. Then I click Add.

However I can only seem to add individual IP addresses, not IP ranges. I want to block 194.*.*.* but I can't seem to enter that. I tried entering 194.0.0.0 but that doesn't seem to work.

Can anyone help?
Thanks

Did you get this resolved? I don't have IIS6 to work with myself, sorry.

Hi jonat8,

You need to select the "Group of computers" option instead of the default "Single computer" option in the "Deny Access" dialogue.

When this is selected, an additional group of text boxes appears to the right of the IP Address box, into which you can put a netmask.

So, to block 194.*.*.* you put 194.0.0.0 into the left-hand set of boxes and 255.0.0.0 into the right-hand set. The zeros after 194 could have any value as they are ignored based on the netmask.

I don't know if you've used masks before but they basically indicate which bits of the IP address are relevant, so in this case the "255" says that the whole first part of the IP address you entered ("194") is relevant and the "0"s say that the other 3 parts are not. So, the rule is "block any IP that starts with 194 and has anything else following that".

You can be more precise than this with masks - just google "netmask tutorial" for info.

HTH.

Jon.