Preventing hot linking to images outside of specific domains on IIS7/IIS7.5

Question

I have a series of sites that consists of a (1) public site, (2) administrative CMS and (3) image repository.

This question is specific to the image repository.

I want to access any images from any subdomain within a specific domain, but no more.

For example, if the domains for the above sites are:

1. www.foo.com
2. cms.foo.com
3. images.foo.com

I would want to access the images from any domain and subdomain under foo.com,but I want linking from any other domain to fail.

As an additional issue, I would also like to add secondary domains that are allowed to link under the same rules (e.g. acmecorp.com would also be allowed to link).

P.S. In images.foo.com there are only JPG files. There are no PHP pages, so I would need to do this at the IIS7/web.config level.

Thank you.

Answer 1

Sounds like you are looking for "URL Rewrite" whereby you can write custom rules to apply before the request hits your files. In your case, you'd need to define a "URL Rewrite" rule using the "Request Blocking" inbound rules template. You'd enter the allowed allowed host headers that should be in the content headers. Everything else would be blocked. http://www.iis.net/download/URLRewrite -Chris