Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a web page that will be displayed by an iframe called from another web server in an entirely different domain. I only want this page displayed if its is being called by that domain server.

Is it possible to configure IIS 7 to only respond to those servers in a defined domain or IP range?


share|improve this question
The Web doesn't work like that. The contents of the iframe will typically be loaded by the web browser, not the third party server. If you want to create this restriction, you will have to do it within your application code. – Michael Hampton Sep 24 '12 at 22:36
is there any way to do what I am describing? – ChiliYago Sep 24 '12 at 22:40
Of course. But it's not something that we generally deal with at Server Fault. If you want to ask a question about developing your application, you may want to visit our sister site Stack Overflow. – Michael Hampton Sep 24 '12 at 22:44

Michael, look into the IP Address and Domain Restriction module in IIS for creating IP ranges that you can allow/disallow access to your site.

*note you may need to go into the Web Roles interface and enable this feature and restart IIS.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.