Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a few applications running on 1 server, some applications should only be accessible by internal local user's while other applications can be access by anyone on the internet.

http://www.domain.com/APP1 - access internal user and internet user's http://www.domain.com/APP2 - access internal users only http://www.domain.com/APP3 - access internal users only

How do I configure IIS so that it would block internet user's from accessing some of my applications?

share|improve this question

4 Answers 4

up vote 1 down vote accepted

If the server has a NIC on a local network or VPN and you only want users on those networks to be able to access it, you can do this using IP address and domain name restrictions. Under the site Properties go to Directory Security -> IP address and domain name restrictions and follow the instructions in the linked KB article.

share|improve this answer

Assuming you are running your IIS instances on a AD connected server, then enable Windows Authentication on APP2 and APP2.

This will limit access to users who have a user account in your AD.

share|improve this answer

You could put AD auth as Richard suggested, but have you thought about putting your internal apps on an internal web/dns?

www.domain.com/app1 for your external www.domain.local/app2 and /app3 for your internal

Only list the .locals in your local DNS - and don't give it an external -> internal rule in your firewall. That way you don't have to even worry/think about what people outside your internal can do.

share|improve this answer

In the previous incarnation (IIS6), you could specify which IP's were allowed, and deny everything else, per site..

http://technet.microsoft.com/en-us/library/cc730889%28WS.10%29.aspx

Sort of shows how to do that on IIS7.. (not sure, don't have one lying around to test)

Assuming your users would be from the same subnets it should work...

share|improve this answer
    
You can, if you isntall the module (art of the OS - IIS7 is just VERY modular). –  TomTom Sep 1 '10 at 7:03
    
lol they are copying the Apache trick eh.. what's next.. –  Grizly Sep 1 '10 at 7:05

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.