Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a couple of sites that I want to only allow access to specific IPs. I have added these IP addresses to IIS7 via the IPv4 Address and Domain Restrictions functionality, as per the link below:

I have also seen mention of using the management service (, although this (to me) appears to set the restrictions at too high a level?

Anyway, I have added 4 IP addresses as 'Allow' but I can still connect to the site from a different IP address.

Can anyone clarify how I can ensure that only the listed Allow addresses can actually get through? I'm new to this so please forgive me if I sound like a dumbass!



share|improve this question

You're on the right track. Also check the "Edit Feature Settings" in IIS Manager. Change "Access for unspecified clients" from Allow to Deny.

share|improve this answer
Thanks Scott - I'll give that a go! – user62975 Dec 9 '10 at 9:16
Nice one Scott - seems to be working. Thanks for pointing me in the right direction! – user62975 Dec 10 '10 at 13:51
Great, thanks for confirming Tam. – Scott Forsyth - MVP Dec 10 '10 at 16:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.